|
Plagegeister aller Art und deren Bekämpfung: SpyHunter 4 + Optimizer ProWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.02.2013, 22:20 | #46 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Das hoffe ich auch. Mach bitte nochmals einen Neustart und schau, ob dieses Ding danach wirklich nicht mehr auftaucht.
__________________ cheers, Leo |
12.02.2013, 22:29 | #47 |
| SpyHunter 4 + Optimizer Pro Ich glaub ich gebe auf......Spyhunter ist wieder in Programme und Funktionen.Das gibt es doch gar nicht.)-:
__________________ |
12.02.2013, 22:38 | #48 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Wieder die gleiche Frage: Ist es denn nur noch dieser Eintrag unter Programme und Funktionen, oder ist auch das Programm noch da?
__________________Mach bitte das nochmals, ich möchte sehen, ob sich auch die Files wiederherstellen:
Code:
ATTFilter :files C:\Program Files\Enigma Software Group C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter :reg [-HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}]
__________________ Geändert von aharonov (12.02.2013 um 23:03 Uhr) |
13.02.2013, 08:27 | #49 |
| SpyHunter 4 + Optimizer Pro Guten Morgen Wie kann ich erkennen,ob es sich nur um den Eintrag oder das Programm handelt? Fenster von Spyhunter sind bislang nicht wieder aufgetaucht. ========== FILES ========== File\Folder C:\Program Files\Enigma Software Group not found. File\Folder C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter not found. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}\ not found. OTL by OldTimer - Version 3.2.69.0 log created on 02132013_082305 Grüße Michael |
13.02.2013, 09:17 | #50 | |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Hey Michael, Zitat:
Mach bitte noch ein letztes mal die Suche wie hier mit SystemLook, damit wir sicher sind.
__________________ cheers, Leo |
13.02.2013, 09:26 | #51 |
| SpyHunter 4 + Optimizer Pro SystemLook 30.07.11 by jpshortstuff Log created at 09:21 on 13/02/2013 by mischa Administrator - Elevation successful ========== filefind ========== Searching for "*spyhunter*" C:\Windows\System32\Tasks\SpyHunter4Startup --a---- 3332 bytes [10:02 01/09/2012] [08:40 08/02/2013] 7F9C75A4608149F744D31AEF061D6C14 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe --a---- 7396224 bytes [20:34 14/01/2013] [20:34 14/01/2013] 67F37164CFE532E69FC4330C0A6C200D C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_171906.log --a---- 21393 bytes [16:19 09/02/2013] [16:46 09/02/2013] D9F94388B1AA1848B49702A006E10B18 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_174735.log --a---- 21572 bytes [16:47 09/02/2013] [22:25 09/02/2013] 5726EF8227C8F20FEC98218DDE2D9D03 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_232603.log --a---- 21393 bytes [22:26 09/02/2013] [22:48 09/02/2013] 474D7D7471A3A11E9596F3202809FEA1 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_234939.log --a---- 21751 bytes [22:49 09/02/2013] [09:16 10/02/2013] 9C31EB509A9EF6FC0BEEBC7EC1D0A735 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_101655.log --a---- 21259 bytes [09:16 10/02/2013] [09:17 10/02/2013] B1057459B2D91F8BDE107423C3ABF3E8 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_104921.log --a---- 21393 bytes [09:49 10/02/2013] [13:20 10/02/2013] 8A401D91A2CBDFF7432F0CDEF6DB0298 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_142138.log --a---- 21304 bytes [13:21 10/02/2013] [15:18 10/02/2013] E9B453DDD4517037D66678C43E6BF587 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_174026.log --a---- 21393 bytes [16:40 10/02/2013] [17:14 10/02/2013] 7730E3526BD42F676FA582DE22A7861C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_181535.log --a---- 22109 bytes [17:15 10/02/2013] [11:54 11/02/2013] 20AC25295357513750125DEAB241407A C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_125515.log --a---- 21572 bytes [11:55 11/02/2013] [17:59 11/02/2013] EF2D1C5BEF2D0C66B0F40477E32D9586 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_190022.log --a---- 21259 bytes [18:00 11/02/2013] [19:04 11/02/2013] BC99BEDFD6D79FD831DAE13EF62F228C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_200505.log --a---- 21393 bytes [19:05 11/02/2013] [20:08 11/02/2013] 6AE6AA7A36B7F08CE6C9CBFA836AA18B C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_212529.log --a---- 24539 bytes [20:25 11/02/2013] [04:27 12/02/2013] 44F3B4AB2DD496C54AED8D3B3E9D76CE C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_125408.log --a---- 21919 bytes [11:54 12/02/2013] [12:12 12/02/2013] FEA7C03A59CC4B99504232DDB4184824 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_132519.log --a---- 21919 bytes [12:25 12/02/2013] [12:26 12/02/2013] D7959CD606B0FF1D8F37D7436A84ABAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_143404.log --a---- 21919 bytes [13:34 12/02/2013] [13:45 12/02/2013] 7F922AC3667669295A7F207DE0313DAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_191747.log --a---- 21919 bytes [18:17 12/02/2013] [19:17 12/02/2013] 12765F88E892B0234383F7FC4BD978F8 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER-INSTALLER (1).EXE-5D2DBEB0.pf --a---- 26280 bytes [08:38 08/02/2013] [08:39 08/02/2013] 8318946B6316D1C44BC755771839EA22 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf --a---- 158330 bytes [08:41 08/02/2013] [08:41 08/02/2013] 626DE1AA4BB3F46EBF3374EAE33EE9EE Searching for "*enigma*" No files found. ========== folderfind ========== Searching for "*spyhunter*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter d------ [10:02 01/09/2012] Searching for "*enigma*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group d------ [10:02 01/09/2012] ========== regfind ========== Searching for "spyhunter" [HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter] [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] "InstallLoc"="C:\Program Files\Enigma Software Group\SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASAPI32] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASMANCS] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\4EE16055EDFAB8E46BCE054F706E7050] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "DisplayName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "DisplayIcon"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "DisplayName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F03852E-E755-4166-9809-159FCCD92652}] "Path"="\SpyHunter4Startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup] [HKEY_USERS\S-1-5-21-1435074266-3387115179-3275037125-1000\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" Searching for "enigma" [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup] [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] "InstallLoc"="C:\Program Files\Enigma Software Group\SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig] "uninstlnk"="hxxp://sh.enigmasoftware.com/sh4/survey/uninstall_survey.php?affid=0&hwx=65cbe0b29dc40c290b8954efca0d975f&id=2&lang=DE&sid=revenuewire" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Contact"="Enigma Customer Support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "HelpLink"="hxxp://www.enigmasoftware.com/support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Publisher"="Enigma Software Group USA, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "URLUpdateInfo"="hxxp://www.enigmasoftware.com" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "DisplayIcon"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe,0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "Contact"="Enigma Customer Support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "HelpLink"="hxxp://www.enigmasoftware.com/support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "Publisher"="Enigma Software Group USA, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] "URLUpdateInfo"="hxxp://www.enigmasoftware.com" -= EOF =- |
13.02.2013, 11:30 | #52 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Also die Files sind gelöscht, das sind nur noch welche in Quarantäne. Versuch mal noch das, um die Regschlüssel zu entfernen: Drücke + R Taste und schreibe "notepad" in das Ausführen Fenster und drücke OK. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument: Code:
ATTFilter Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"=- "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"=- "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"=- [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}]
Mach danach bitte nochmals den gleichen Suchlauf mit SystemLook.
__________________ cheers, Leo |
13.02.2013, 12:56 | #53 |
| SpyHunter 4 + Optimizer Pro SystemLook 30.07.11 by jpshortstuff Log created at 12:54 on 13/02/2013 by mischa Administrator - Elevation successful No Context: Windows Registry Editor Version 5.00 No Context: [-HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup] No Context: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] No Context: "C:\Program Files\Enigma Software Group\SpyHunter\"=- No Context: "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"=- No Context: "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"=- No Context: [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6B6C4C46-1B7E-4A41-9E70-ACFBB22B1D81}] No Context: -= EOF =- |
13.02.2013, 13:03 | #54 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Sorry, das war ein Missverständnis. Du sollst nochmals diese Suche mit SystemLook machen: Lade SystemLook (by jpshortstuff) herunter und speichere das Tool auf dem Desktop.
__________________ cheers, Leo |
13.02.2013, 13:10 | #55 |
| SpyHunter 4 + Optimizer Pro sorry.....so hier der Scan In Programme Funktionen habe ich nichts mehr gefunden.Vielleicht bleibt es ja diesmal so. (-: SystemLook 30.07.11 by jpshortstuff Log created at 13:04 on 13/02/2013 by mischa Administrator - Elevation successful ========== filefind ========== Searching for "*spyhunter*" C:\Windows\System32\Tasks\SpyHunter4Startup --a---- 3332 bytes [10:02 01/09/2012] [08:40 08/02/2013] 7F9C75A4608149F744D31AEF061D6C14 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe --a---- 7396224 bytes [20:34 14/01/2013] [20:34 14/01/2013] 67F37164CFE532E69FC4330C0A6C200D C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_171906.log --a---- 21393 bytes [16:19 09/02/2013] [16:46 09/02/2013] D9F94388B1AA1848B49702A006E10B18 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_174735.log --a---- 21572 bytes [16:47 09/02/2013] [22:25 09/02/2013] 5726EF8227C8F20FEC98218DDE2D9D03 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_232603.log --a---- 21393 bytes [22:26 09/02/2013] [22:48 09/02/2013] 474D7D7471A3A11E9596F3202809FEA1 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130209_234939.log --a---- 21751 bytes [22:49 09/02/2013] [09:16 10/02/2013] 9C31EB509A9EF6FC0BEEBC7EC1D0A735 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_101655.log --a---- 21259 bytes [09:16 10/02/2013] [09:17 10/02/2013] B1057459B2D91F8BDE107423C3ABF3E8 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_104921.log --a---- 21393 bytes [09:49 10/02/2013] [13:20 10/02/2013] 8A401D91A2CBDFF7432F0CDEF6DB0298 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_142138.log --a---- 21304 bytes [13:21 10/02/2013] [15:18 10/02/2013] E9B453DDD4517037D66678C43E6BF587 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_174026.log --a---- 21393 bytes [16:40 10/02/2013] [17:14 10/02/2013] 7730E3526BD42F676FA582DE22A7861C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130210_181535.log --a---- 22109 bytes [17:15 10/02/2013] [11:54 11/02/2013] 20AC25295357513750125DEAB241407A C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_125515.log --a---- 21572 bytes [11:55 11/02/2013] [17:59 11/02/2013] EF2D1C5BEF2D0C66B0F40477E32D9586 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_190022.log --a---- 21259 bytes [18:00 11/02/2013] [19:04 11/02/2013] BC99BEDFD6D79FD831DAE13EF62F228C C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_200505.log --a---- 21393 bytes [19:05 11/02/2013] [20:08 11/02/2013] 6AE6AA7A36B7F08CE6C9CBFA836AA18B C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130211_212529.log --a---- 24539 bytes [20:25 11/02/2013] [04:27 12/02/2013] 44F3B4AB2DD496C54AED8D3B3E9D76CE C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_125408.log --a---- 21919 bytes [11:54 12/02/2013] [12:12 12/02/2013] FEA7C03A59CC4B99504232DDB4184824 C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_132519.log --a---- 21919 bytes [12:25 12/02/2013] [12:26 12/02/2013] D7959CD606B0FF1D8F37D7436A84ABAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_143404.log --a---- 21919 bytes [13:34 12/02/2013] [13:45 12/02/2013] 7F922AC3667669295A7F207DE0313DAD C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter\Log\SpyHunter4_20130212_191747.log --a---- 21919 bytes [18:17 12/02/2013] [19:17 12/02/2013] 12765F88E892B0234383F7FC4BD978F8 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER-INSTALLER (1).EXE-5D2DBEB0.pf --a---- 26280 bytes [08:38 08/02/2013] [08:39 08/02/2013] 8318946B6316D1C44BC755771839EA22 C:\_OTL\MovedFiles\02122013_220404\C_Windows\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf --a---- 158330 bytes [08:41 08/02/2013] [08:41 08/02/2013] 626DE1AA4BB3F46EBF3374EAE33EE9EE Searching for "*enigma*" No files found. ========== folderfind ========== Searching for "*spyhunter*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group\SpyHunter d------ [10:02 01/09/2012] Searching for "*enigma*" C:\_OTL\MovedFiles\02122013_220404\C_Program Files\Enigma Software Group d------ [10:02 01/09/2012] ========== regfind ========== Searching for "spyhunter" [HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\SpyHunter4.exe] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASAPI32] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASMANCS] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\4EE16055EDFAB8E46BCE054F706E7050] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Users\mischa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "DisplayName"="SpyHunter" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F03852E-E755-4166-9809-159FCCD92652}] "Path"="\SpyHunter4Startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup] [HKEY_USERS\S-1-5-21-1435074266-3387115179-3275037125-1000\Software\Microsoft\Installer\Products\64C4C6B6E7B114A4E907CABF2BB2D118] "ProductName"="SpyHunter" Searching for "enigma" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\Enigma Software Group\SpyHunter\Defs\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\167ED423049710645A22436AA88D0A99] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1957C0511E2C398429B3643FC3CF903E] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\1F94163E4B8E8524AB2D208677C1C639] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoCheckUpdate" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\21B3B2A547DD5C14583129BD7D54AE43] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\270D6EC2A97B99548BA1F764A91027A1] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\2BAC083D35096B44C91BE7BCF2A9BE35] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\325484F6157B534449A295F31E20CC49] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\EsgScanner.inf" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3A1F744C14FB4E14A93C1628CDE36240] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorWinCom_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\3B801397615ADA446AA0C0D27F8C35F5] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ShieldOnBoot" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\54F23924A8B2A594D8F3B34555F857DB] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defs\def.dat" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5942B0FB3B0060E4FB3008F9D51CFC26] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\native.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\5A2C306FF7B069949928B69774A9C8A0] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\GuardStatus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\64717EB28EB8ECA4A9584B6BA7934B83] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActiveDesktop_remember" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\79455857BB467F24D81891AAD09F7079] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGScanner.sys" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\799475A3B22A0B94085DE6AF372B869F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8014B476AFF7674499E83E22C791A5A2] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\8D95E4363DF07F44FB6986E629D65FDB] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\ActHomePageProt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\96F935B48BE0455459DB1E7E97E04BDF] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorDNS" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\9BDCF589B9440364E8DB3F9535DDBB9F] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Defman.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B0A0F90AD49B5994BB1DAD4DDC089CD6] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files (x86)\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B435C9AD1BF350D48BE80D5A79BA2EEE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ESGRKCHK.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\B8759E73AEB287C4485B33F51B7DE868] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorIEImages" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\C2E30ACAB517FB744ACF4672E649BE7F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\Language" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\CA1A35F40F64E2C419551606C418D4C6] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\AutoUpdateDownload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D23A4A6BB4BD7474197B486733BBB37A] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ShScanner.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D69C9067CD45885488F1E05319EDD023] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\ExecutionGuard.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D75FE63EDA1D54A4CA6F51CADD11E656] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\CheckShOsCompatibility" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\D91BE455A0889C4458F258847859EC6F] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorHosts" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\DD372D2F4DF0D0540B2F37ED85511E4C] "64C4C6B6E7B114A4E907CABF2BB2D118"="22:\Software\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig\MonitorSystem" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\F87702C2D0F509E4FB7923DA78F44976] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\license.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Components\FD27396ADF8235D449146899FD9100FE] "64C4C6B6E7B114A4E907CABF2BB2D118"="C:\Program Files\Enigma Software Group\SpyHunter\Common.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Contact"="Enigma Customer Support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "HelpLink"="hxxp://www.enigmasoftware.com/support" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "InstallLocation"="C:\Program Files\Enigma Software Group\SpyHunter\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "Publisher"="Enigma Software Group USA, LLC" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1435074266-3387115179-3275037125-1000\Products\64C4C6B6E7B114A4E907CABF2BB2D118\InstallProperties] "URLUpdateInfo"="hxxp://www.enigmasoftware.com" -= EOF =- |
13.02.2013, 13:18 | #56 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Prima, jetzt sollten wir die wesentlichen Sachen von diesem Mistding alle erwischt haben. Im Scan sind nur noch ein paar Überreste zu sehen. Hast du denn jetzt sonst noch Probleme mit dem Rechner oder ist alles in Ordnung?
__________________ cheers, Leo |
13.02.2013, 14:24 | #57 |
| SpyHunter 4 + Optimizer Pro Also aus meiner Sicht scheint alles in Ordnung.In Programme Funktionen etc.ist nichts mehr sichtbar und Fenster öffnen sich auch keine. Was meinst du? |
13.02.2013, 14:31 | #58 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Ja, von meiner Seite ist auch alles erledigt. Der SpyHunter ist abgeschossen und die restliche Malware hatten wir vorher schon beseitigt. Hier nochmals die Anleitung zum Aufräumen. Die Schritte 1 bis 3 musst du nur machen, falls du sie vorher noch nicht gemacht hast, aber den Schritt 4 auf jeden Fall nochmals durchführen: Schritt 1 Starte defogger und drücke den Button Re-enable. Schritt 2 Bitte deaktiviere jetzt temporär das Antiviren-Programm, evtl. vorhandenes Skript-Blocking und Antimalware-Programme. Drücke bitte die + R Taste, kopiere folgenden Text in das Ausführen Fenster Code:
ATTFilter Combofix /Uninstall Du kannst die eben deaktivierten Programme nun wieder einschalten. Schritt 3 Den ESET Online Scanner kannst du behalten, um ab und zu für eine Zweitmeinung dein System damit zu scannen. Falls du ESET aber deinstallieren möchtest, dann: Drücke bitte die + R Taste, kopiere folgenden Text in das Ausführen Fenster Code:
ATTFilter "%ProgramFiles%\Eset\Eset Online Scanner\OnlineScannerUninstaller.exe" Schritt 4 Downloade dir bitte delfix auf deinen Desktop.
>> OK << Wir sind durch, deine Logs sehen für mich im Moment sauber aus. Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst. Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann. Epilog: Tipps, Dos & Don'ts Aktualität von System und Software Das Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-Software Eine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im Internet Nebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine Hinweise Abschliessend noch ein paar grundsätzliche Bemerkungen:
Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.
__________________ cheers, Leo |
13.02.2013, 16:47 | #59 |
| SpyHunter 4 + Optimizer Pro Hallo Leo Zum Rechner möchte ich folgendes Statement abgeben: Es ist wieder alles in Ordnung.Rechner funktioniert wieder einwandfrei.Besser geht es nicht! Zu dir möchte ich folgendes sagen: Ich weiß zwar nicht genau worin deine Motivation begründet liegt, deine Zeit mit meinen Problemen bzw. die meines Rechners zu verbringen aber ich zolle dir und deiner Motivation absolute Anerkennung und du hast meinen ganzen Respekt! Auch so kann man die Welt ein kleines bisschen besser machen. (-; Vielen,vielen Dank ! Michael |
13.02.2013, 16:53 | #60 |
/// TB-Ausbilder | SpyHunter 4 + Optimizer Pro Danke für die Rückmeldung, Michael. Freut mich, dass wir helfen konnten. Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
Themen zu SpyHunter 4 + Optimizer Pro |
administrator, anti-malware, autostart, dateien, eingefangen, entfernung, erfolgreich, exploit.drop.gsa, explorer, gelöscht, installcore, microsoft, optimizer, optimizer pro, pup.adware.mediaget, pup.funmoods, quarantäne, rootkit.0access, speicher, trojan.agent, trojan.banker, trojan.dropper.bcminer, version, viren |