| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Vista startet/bootet sehr langsam durch "Virus" PUP.OptionalWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.10.2013, 20:12
| #16 |
 |  Vista startet/bootet sehr langsam durch "Virus" PUP.Optional wie meinst Du das... den Eset-Scan nochmals machen...!!! wenn ja .. dann morgen... über 4.30 Std hat es gedauert... und den SecurityCheck können meine Freunde...die ich angerufen habe - auch nicht runterladen !!! zur Info: Scan Resultat - es wurden 13 Infected Files gefunden... bei 10 Musiktitel - RTL Hits of Best ... HTML/lframe.B.Gen.virus bei c:\windows\system32\pouamy0s5.dll.vir ... a variant of Win32Mediyes.R trojan bei c:\users\michael\downloads\flash_player_prp_setup.exe.vir ... a variant of Win32/Adware.iBryte.G.applicat.... Geändert von meikel6460 (13.10.2013 um 20:23 Uhr) |
|
13.10.2013, 20:15
| #17 | |
| /// Helfer-Team  | Vista startet/bootet sehr langsam durch "Virus" PUP.OptionalZitat:
Kannst du mal ein screenshot machen?
__________________ |
|
13.10.2013, 20:59
| #18 |
| | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional unter Opera konnte ich SecurityCheck herunterladen...
__________________mal schaun ob mein Zip-Programm es auch öffnet... |
|
14.10.2013, 09:30
| #19 |
| /// Helfer-Team | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Es ist kein ZIP sondern eine EXE. |
|
14.10.2013, 17:08
| #20 |
| | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional SecurityCheck ( RegClean Pro\Version 6.1\RCPscanlog.xml) durchgeführt.. das Textdokument in Form von checkup.txt ist nicht erschienen... erscheint nur in der Registrierung überprüfen... diesen Text kann ich nur in Word abspeichern...und in ZipDatei umgewandelt |
|
14.10.2013, 19:34
| #21 |
| /// Helfer-Team | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Das Programm heisst Securitycheck. Kann sein, dass du staendig auf Werbung klickst?
__________________ --> Vista startet/bootet sehr langsam durch "Virus" PUP.Optional |
|
14.10.2013, 23:14
| #22 |
| | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional hoffe das es jetzt das "Richtige" war... Code:
ATTFilter Results of screen317's Security Check version 0.99.74 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java(TM) 6 Update 22 Java(TM) 6 Update 33 Java 7 Update 40 Java(TM) 6 Update 7 Adobe Flash Player 11.9.900.117 Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox 18.0.1 Firefox out of Date! Google Chrome 29.0.1547.76 Google Chrome 30.0.1599.69 ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` |
|
15.10.2013, 11:02
| #23 | |
| /// Helfer-Team | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Alle alen Java versíonen entfernen! Zitat:
Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Sehr gut!  damit bist Du sauber und entlassen!  Tool-Bereinigung Die Reihenfolge ist hier entscheidend.
Lektuere zum abarbeiten: http://www.trojaner-board.de/90880-d...tallation.html http://www.trojaner-board.de/105213-...tellungen.html PluginCheck http://www.trojaner-board.de/96344-a...-rechners.html Secunia Online Software Inspector http://www.trojaner-board.de/71715-k...iendungen.html http://www.trojaner-board.de/83238-a...sschalten.html http://www.trojaner-board.de/109844-...ren-seite.html PC wird immer langsamer - was tun? |
|
15.10.2013, 15:37
| #24 |
| | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional ich sage erstmal Vielen Dank für die ausführliche Hilfe.. werde jetzt die letzten "Schritte" anwenden & mitteilen ob alles geklappt hat... Habe aber noch 2 Fragen: 1. bekomme als ein Werbefenster - bei jedem Link den ich öffne oder auch hier wenn ich eine Seite weiterblättere... T Related Seacheres und ich bin der Meinung das dieses "Fenster" mit verantwortlich ist das ich "Deine" Link die Du mitgeteilt hast nicht runterladen konnte... bzw. es seperat tun musste wie z.B. hxxp://filepony.de/download-tfc/ -> klicke ich auf Downlaod -> kommt wieder Download -> klicke drauf kommt https://www.google.de/?gws_rd=cr&ei=DkJdUr2UKYzJswa7kIHwBw 2. welche Dienste soll ich beim "Start" noch deaktiven - sind diese in meinen LogFile zu erkennen.. Anmerkung zu meiner Frage 1 : Habe festgestellt das mein Laptop auch mit Adware befallen.. also ein Schadprogramm, das ständig Werbung einblenden. Wie und mit welches Programm/Software kann ich es entfernen... Geändert von meikel6460 (15.10.2013 um 14:26 Uhr) |
|
15.10.2013, 19:34
| #25 |
| /// Helfer-Team | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/
|
|
16.10.2013, 09:44
| #26 |
| | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Hi, danke für die weitere Info... welche der zoek.exe soll ich nehmen.. Download zoek.exe version 4.0.0.4(rar) Download zoek.exe version 4.0.0.4(zip) Code:
ATTFilter Zoek.exe Version 4.0.0.5 Updated 13-October-2013
Tool run by michael on 16.10.2013 at 10:19:45,30.
Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\michael\AppData\Local\Temp\7zO86BE.tmp\zoek.exe [Script inserted]
==== System Restore Info ======================
16.10.2013 10:21:34 Zoek.exe System Restore Point Created Succesfully.
==== Creating Sample__1028.zip ======================
Copied file C:\Users\michael\AppData\Roaming\$I8WWMSL.exe to sample\$I8WWMSL.exe
Copied file C:\Users\michael\AppData\Roaming\$IGFO8I8.exe to sample\$IGFO8I8.exe
Copied file C:\Users\michael\AppData\Roaming\$IPEU76T.exe to sample\$IPEU76T.exe
Copied file C:\Users\michael\AppData\Roaming\$IPFTX71.exe to sample\$IPFTX71.exe
sample\$I8WWMSL.exe renamed to CC5D0FF741B4A081A678A3B9D4854843
sample\$IGFO8I8.exe renamed to 09D9697C64F54E8F175476B10869A9F9
sample\$IPEU76T.exe renamed to 47DDBBF70A59093DD810C3FF81442B72
sample\$IPFTX71.exe renamed to 094FAEEED68511D4CB425E49246A636B
C:\Users\Public\Desktop\sample__1028.zip created successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C4BA0842-10B6-411A-92C5-FBF487DEE8AA} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9EE92B7-EDD5-4AD9-8029-2EC6818E653A} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9EE92B7-EDD5-4AD9-8029-2EC6818E653A} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{fe063412-bea4-4d76-8ed3-183be6220d17} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{fe063412-bea4-4d76-8ed3-183be6220d17} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{204DF522-9A96-4A72-ABB0-60F7A216D6D2} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C255C8A-E604-49b4-9D64-90988571CECB} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25BC7718-0BFA-40EA-B381-4B2D9732D686} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Mozilla\Firefox\Extensions\lyrix@lyrixeeker.co deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\prefs.js:
user_pref("browser.startup.homepage", "https://www.facebook.com/");
user_pref("browser.search.order.1", "");
user_pref("browser.search.useDBForOrder", "false");
Added to C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\prefs.js:
Deleted from C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\prefs.js:
user_pref("browser.search.useDBForOrder", true);
Added to C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\prefs.js:
ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073
---- Lines CT2939532 removed from prefs.js ----
---- Lines CT2939532 modified from prefs.js ----
---- Lines CT2939532 removed from user.js ----
---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from prefs.js ----
---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 modified from prefs.js ----
---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from user.js ----
---- Lines CT2269050 removed from prefs.js ----
---- Lines CT2269050 modified from prefs.js ----
---- Lines CT2269050 removed from user.js ----
---- Lines inbox.com removed from prefs.js ----
---- Lines inbox.com modified from prefs.js ----
---- Lines inbox.com removed from user.js ----
---- Lines ask.com removed from prefs.js ----
---- Lines ask.com modified from prefs.js ----
---- Lines ask.com removed from user.js ----
---- FireFox user.js and prefs.js backups ----
user__1031_.backup
prefs__1031_.backup
ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default
---- Lines CT2939532 removed from prefs.js ----
---- Lines CT2939532 modified from prefs.js ----
---- Lines CT2939532 removed from user.js ----
---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from prefs.js ----
---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 modified from prefs.js ----
---- Lines C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 removed from user.js ----
---- Lines CT2269050 removed from prefs.js ----
---- Lines CT2269050 modified from prefs.js ----
---- Lines CT2269050 removed from user.js ----
---- Lines inbox.com removed from prefs.js ----
---- Lines inbox.com modified from prefs.js ----
---- Lines inbox.com removed from user.js ----
---- Lines ask.com removed from prefs.js ----
---- Lines ask.com modified from prefs.js ----
---- Lines ask.com removed from user.js ----
---- FireFox user.js and prefs.js backups ----
user__1031_.backup
prefs__1031_.backup
==== Deleting Files \ Folders ======================
C:\Program Files\BonanzaDeals deleted
C:\Program Files\BonanzaDealsLive deleted
C:\Program Files\SopCast deleted
C:\Program Files\Common Files\DVDVideoSoft\bin deleted
C:\Program Files\iMesh Applications deleted
C:\Program Files\MyPC Backup deleted
C:\found.000 deleted
C:\found.001 deleted
C:\found.002 deleted
C:\found.003 deleted
C:\found.004 deleted
C:\found.005 deleted
C:\found.006 deleted
C:\found.007 deleted
C:\found.008 deleted
C:\found.009 deleted
C:\found.010 deleted
C:\found.011 deleted
C:\found.012 deleted
C:\found.013 deleted
C:\found.014 deleted
C:\found.015 deleted
C:\found.016 deleted
C:\found.017 deleted
C:\found.018 deleted
C:\found.019 deleted
C:\found.020 deleted
C:\found.021 deleted
C:\found.022 deleted
C:\found.023 deleted
C:\found.024 deleted
C:\found.025 deleted
C:\found.026 deleted
C:\Users\michael\AppData\Roaming\DigitalSite deleted
C:\Users\michael\AppData\Roaming\Systweak deleted
C:\ProgramData\BonanzaDealsLive deleted
C:\Users\michael\AppData\Local\BonanzaDealsLive deleted
C:\Users\michael\AppData\Local\avgchrome deleted
C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\Users\michael\Downloads\sweetimsetup.exe deleted
C:\Users\michael\Downloads\SopCast.zip deleted
C:\Users\michael\Downloads\tb_oldieradio.exe deleted
C:\Users\michael\Downloads\FreeYouTubeToMP3Converter(1).exe deleted
C:\Users\michael\Downloads\FreeYouTubeToMP3Converter.exe deleted
C:\Users\michael\Downloads\FreeYouTubeToMP3Converter3.12.0.128.exe deleted
C:\Users\michael\Downloads\SoftonicDownloader_fuer_temp-file-cleaner.exe deleted
C:\Windows\tasks\DigitalSite.job deleted
C:\Windows\system32\tasks\DigitalSite deleted
C:\Windows\system32\roboot.exe deleted
C:\Windows\System32\searchplugins deleted
C:\Windows\System32\Extensions deleted
C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\foxydeal.sqlite deleted
C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\jetpack deleted
C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\CT2939532 deleted
C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\ICQToolbarData deleted
C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default\CT2269050 deleted
C:\Windows\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D} deleted
C:\Users\michael\AppData\Roaming\$I8WWMSL.exe deleted
C:\Users\michael\AppData\Roaming\$IGFO8I8.exe deleted
C:\Users\michael\AppData\Roaming\$IPEU76T.exe deleted
C:\Users\michael\AppData\Roaming\$IPFTX71.exe deleted
"C:\Users\michael\AppData\Roaming\FRITZ" not found
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\Program Files\Real\RealPlayer\browserrecord" [29.06.2009 01:17]
==== Firefox Extensions ======================
ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073
- Whilokii - %ProfilePath%\extensions\firefox@whilokii.net
- ProxTube - Gesperrte YouTube Videos entsperren - %ProfilePath%\extensions\ich@maltegoetz.de
- OLDIE RADIO - %ProfilePath%\extensions\toolbar-tbplatform@alexa.com
- FDislike - %ProfilePath%\extensions\fbdislike@doweb.fr.xpi
- Google Search by Image - %ProfilePath%\extensions\google@hitachi.com.xpi
- WEB.DE MailCheck - %ProfilePath%\extensions\toolbar@web.de.xpi
ProfilePath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default
- Logitech - %ProfilePath%\extensions\DeviceDetection@logitech.com
- Facebook Emoticon amp; Smiley - %ProfilePath%\extensions\emoticon@luzky.com
- F1 by Mozilla Labs - %ProfilePath%\extensions\ffshare@mozilla.org
- FoxyProxy Basic - %ProfilePath%\extensions\foxyproxy@eric.h.jung
- El gusto de la suerte > - %ProfilePath%\extensions\inquiry@sharelovestory.com
- Garmin Communicator - %ProfilePath%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
- MyKey Interface - %ProfilePath%\extensions\{FACC66B7-E49F-49ed-997E-66A221FD956D}
- FastestFox - %ProfilePath%\extensions\smarterwiki@wikiatic.com.xpi
- GMX Toolbar - %ProfilePath%\extensions\toolbar@gmx.net.xpi
- FootieFox - %ProfilePath%\extensions\{9fb7d178-155a-4318-9173-1a8eaaea7fe4}.xpi
AppDir: C:\Program Files\Mozilla Firefox
- Undetermined - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073
CFAF7B67C78D09D79688AEDCA3D090E2 - C:\Users\michael\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll - Google Update
4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash
CA0E1DFBE480CF0BE13A0883BEB378B6 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U40
AF661355EBAB898EB92D5454AEF93CE0 - C:\Windows\system32\npdeployJava1.dll - Java Deployment Toolkit 7.0.400.43
04ABD13AB3893DE73AFD48DE075AB8E6 - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
BA6B92B8D1493C958C6CCE0A8DEC57CD - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
BE501CBC29B2025A263D80D399F1797A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.1.0.30109.0.dll - Silverlight Plug-In
BE501CBC29B2025A263D80D399F1797A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In
04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat
101700E93EB905992B518256CB441829 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll - Google Update
7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
C548328E9DE5EB73350EF292D7140662 - C:\Program Files\Picasa2\npPicasa3.dll - Picasa
4AEB0F6D18BDDCAA7DACC3B53C8312A2 - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll - NVIDIA 3D Vision
AA526C8318F7656169A978611B9223CD - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll - NVIDIA 3D VISION
0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Users\michael\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
DAD55CEF682EAE6FA7B4C9487563A496 - C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll - Shockwave for Director / Shockwave for Director
4676A8E1EE37E71486717ECD1E61C17B - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director
F61068B91A84772966B64A85F066076F - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1
DA68715DF284F052083294F6A4C78A09 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1
821124774020771EE8AC172800A057D1 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1
9B7A2478DCCB2E7C531C71E282941DCC - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1
4959AA050C0F7EC3CCC42B223DE9BAD8 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1
A4BBE6E60A682689461E54CB85BD1884 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1
6421E0DA7580251A6C79673A5A92F488 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1
2EA4B85EF64CA48B792FEF23AEEF7DC1 - C:\Users\michael\AppData\Roaming\Mozilla\plugins\NpFv530.dll - Flatcast Viewer Plugin 5.3.0.784
C50B22C8D91A76069A993A2B5197A296 - C:\Program Files\Veetle\plugins\npVeetle.dll - Veetle TV Core
866B027053F3A40BC36126D265C78E96 - C:\Program Files\Veetle\Player\npvlc.dll - Veetle TV Player
886A8779BD2CD069D492ADC334DD885C - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector
24E990B1E6D55428001843CF7217DD81 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox
30740221C0AE535DA3FA7228C1C5A826 - C:\Program Files\Veetle\VLCBroadcast\npvbp.dll - Veetle Broadcaster Plugin
3509063A268A4197CF8E713BD22B0978 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery
9E448F221E741DD0ACCB381190D01B3E - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll - RealJukebox NS Plugin
5DB82B8C515C875AE58E1B8B5997416B - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
2CDA67C1309CA966D8EFEE4EE0D6CA92 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll - RealPlayer Version Plugin
625D0A824F513CE1CABB8861E97F2142 - C:\Program Files\Picasa2\npPicasa2.dll - Picasa
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
B27CCB1168B1960AEC6E9D3E0E0F0D2A - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight
9C9CBF2993A5FF37607F562028B510F6 - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll - Google Talk Plugin Video Accelerator
DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System
Profilepath: C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\ezy83d9t.default
9C9CBF2993A5FF37607F562028B510F6 - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll - Google Talk Plugin Video Accelerator
BA6B92B8D1493C958C6CCE0A8DEC57CD - C:\Users\michael\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
77B09C2C6F407531447DA75E3ACD1C5B - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nppdf32.dll - Adobe Acrobat
AA526C8318F7656169A978611B9223CD - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll - NVIDIA 3D VISION
4AEB0F6D18BDDCAA7DACC3B53C8312A2 - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll - NVIDIA 3D Vision
4676A8E1EE37E71486717ECD1E61C17B - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director
F61068B91A84772966B64A85F066076F - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1
DA68715DF284F052083294F6A4C78A09 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1
821124774020771EE8AC172800A057D1 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1
9B7A2478DCCB2E7C531C71E282941DCC - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1
4959AA050C0F7EC3CCC42B223DE9BAD8 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1
A4BBE6E60A682689461E54CB85BD1884 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1
6421E0DA7580251A6C79673A5A92F488 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1
7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
2EA4B85EF64CA48B792FEF23AEEF7DC1 - C:\Users\michael\AppData\Roaming\Mozilla\plugins\NpFv530.dll - Flatcast Viewer Plugin 5.3.0.784
C50B22C8D91A76069A993A2B5197A296 - C:\Program Files\Veetle\plugins\npVeetle.dll - Veetle TV Core
866B027053F3A40BC36126D265C78E96 - C:\Program Files\Veetle\Player\npvlc.dll - Veetle TV Player
886A8779BD2CD069D492ADC334DD885C - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector
24E990B1E6D55428001843CF7217DD81 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox
30740221C0AE535DA3FA7228C1C5A826 - C:\Program Files\Veetle\VLCBroadcast\npvbp.dll - Veetle Broadcaster Plugin
D6304CF11816513EA8B9FA76FFAA65D4 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\np_gp.dll - getPlusPlus for Adobe 16249
E93467C5327C2760FCAB2B4670847496 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\npDivxPlayerPlugin.dll - DivX Player Netscape Plugin
3509063A268A4197CF8E713BD22B0978 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery
9E448F221E741DD0ACCB381190D01B3E - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nprjplug.dll - RealJukebox NS Plugin
5DB82B8C515C875AE58E1B8B5997416B - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
2CDA67C1309CA966D8EFEE4EE0D6CA92 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\nprpjplug.dll - RealPlayer Version Plugin
625D0A824F513CE1CABB8861E97F2142 - C:\Program Files\Picasa2\npPicasa2.dll - Picasa
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
99F97C9FE748C37528C338A423577FCB - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin
92AB52FC695C1D459E3BE9AFD6CE218D - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\NPOFFICE.DLL - Microsoft Office 2003
F61068B91A84772966B64A85F066076F - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1
DA68715DF284F052083294F6A4C78A09 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1
821124774020771EE8AC172800A057D1 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1
9B7A2478DCCB2E7C531C71E282941DCC - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1
4959AA050C0F7EC3CCC42B223DE9BAD8 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1
A4BBE6E60A682689461E54CB85BD1884 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1
6421E0DA7580251A6C79673A5A92F488 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1
77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat
04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
2CDA67C1309CA966D8EFEE4EE0D6CA92 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll - RealPlayer Version Plugin
9E448F221E741DD0ACCB381190D01B3E - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll - RealJukebox NS Plugin
5DB82B8C515C875AE58E1B8B5997416B - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
C548328E9DE5EB73350EF292D7140662 - C:\Program Files\Picasa2\npPicasa3.dll - Picasa
2EA4B85EF64CA48B792FEF23AEEF7DC1 - C:\PROGRAM FILES\MOZILLA FIREFOX\plugins\NpFv530.dll - Flatcast Viewer Plugin 5.3.0.784
2EA4B85EF64CA48B792FEF23AEEF7DC1 - C:\Program Files\Mozilla Firefox\plugins\NpFv530.dll - Flatcast Viewer Plugin 5.3.0.784
==== Deleting Files \ Folders ======================
"C:\Users\michael\AppData\Roaming\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\extensions\firefox@whilokii.net" deleted
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
aipfmkinhleccnodemkoofnnofpbbpac - C:\Users\michael\AppData\Roaming\BabSolution\CR\searchgol.crx[]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[17.01.2012 11:45]
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
nikpibnbobmbdbheedjfogjlikpgpnhp - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx[]
Search-Gol Toolbar - michael - Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
Whilokii - michael - Default\Extensions\iaimhpklononapfjngelgdokckfjekfc
==== Chrome Fix ======================
C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac deleted successfully
C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aipfmkinhleccnodemkoofnnofpbbpac_0.localstorage deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
"ICQ Search"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="hxxp://de.rd.yahoo.com/customize/ie/defaults/su/msgr9/*hxxp://de.search.yahoo.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{2381E4B7-5C04-459E-9D46-2F9AC1608B66}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"ICQ Search"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{AC6A50A8-7D96-4781-88DC-68A21738A9C8} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MEDB_de"
{BD08A45A-E42D-4C2B-921F-C8D6B79FFA34} WEB.DE Suche Url="hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}"
{C2D15886-0569-47E6-9395-2A10479677E4} GMX search Url="hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie"
{D9B1F081-7C43-4A4D-953F-897A6641B273} GMX Suche Url="hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}"
{F1012029-4B3D-48CC-8B68-EAA0357BF503} 1und1 Suche Url="hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}"
==== Reset Google Chrome ======================
C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-472820592-3686497848-1455512980-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
==== Deleting CLSID Registry Values ======================
==== shortcuts on Users Desktops ======================
C:\Users\michael\Desktop\Calculator.lnk - C:\Windows\system32\calc.exe
C:\Users\michael\Desktop\Free Audio Converter.lnk - C:\Program Files\DVDVideoSoft\Free Audio Converter\FreeAudioConverter.exe
C:\Users\michael\Desktop\Free YouTube to MP3 Converter.lnk - C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
C:\Users\michael\Desktop\Internet Explorer.lnk - C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Users\michael\Desktop\Opera.lnk - C:\Program Files\Opera\opera.exe
C:\Users\michael\Desktop\teXXas.lnk - C:\Program Files\teXXas\teXXas.exe
C:\Users\UpdatusUser\Desktop\Trillian - Computerbild Edition.lnk - C:\Program Files\Trillian\trillian.exe
==== shortcuts on All Users Desktop ======================
C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Public\Desktop\OpenOffice 4.0.0.lnk - C:\Program Files\OpenOffice 4\program\soffice.exe
C:\Users\Public\Desktop\Samsung Kies (Lite).lnk - C:\Program Files\Samsung\Kies\KiesAgent.exe /lite
C:\Users\Public\Desktop\Yahoo Messenger.lnk -
==== shortcuts in All Users Start Menu ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Soluto.lnk - C:\Program Files\Soluto\Soluto.exe /show
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk - C:\Program Files\Microsoft Security Client\msseces.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files\Java\jre7\bin\javacpl.exe -tab about
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files\Java\jre7\bin\javacpl.exe -tab update
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files\Java\jre7\bin\javacpl.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware entfernen.lnk - C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\ Malwarebytes Anti-Malware .lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\chameleon.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Word 2003.lnk - C:\Windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}\wordicon.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files\Microsoft Silverlight\5.1.20913.0\Silverlight.Configuration.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files\Skype\Phone\Skype.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soluto\Soluto.lnk - C:\Program Files\Soluto\Soluto.exe /show
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soluto\Uninstall.lnk - C:\Program Files\Soluto\SolutoUninstall.exe /StartMenu
==== shortcuts in Quick Launch ======================
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk - C:\Program Files\BearShare Applications\BearShare\BearShare.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Corel MediaOne.lnk - C:\Program Files\Corel\Corel MediaOne\Corel MediaOne.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Earth.lnk - C:\Program Files\Google\Google Earth\googleearth.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk - C:\Program Files\ImgBurn\ImgBurn.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\LG PC Suite IV.lnk - C:\Program Files\LG Electronics\LG PC Suite IV\LGUX.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk - C:\Program Files\Nero\Nero8\Nero StartSmart\NeroStartSmart.exe -ScParameter=65
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Opera.lnk - C:\Program Files\Opera\opera.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies (Lite).lnk - C:\Program Files\Samsung\Kies\KiesAgent.exe /lite
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Kies.lnk - C:\Program Files\Samsung\Kies\KiesAgent.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung Story Album Viewer.lnk - C:\Program Files\Samsung\Story Album Viewer\HTML5Viewer.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Skype.lnk -
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WEB.DE.lnk - C:\Program Files\Internet Explorer\iexplore.exe hxxp://go.web.de/tb/ie_desktop_portal
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger .lnk - C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yahoo Messenger.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yahoo Messenger.lnk -
==== shortcuts After Repair ======================
C:\Users\michael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WEB.DE.lnk - C:\Program Files\Internet Explorer\iexplore.exe
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aipfmkinhleccnodemkoofnnofpbbpac deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Users\michael\AppData\Local\Mozilla\Firefox\Profiles\1wge02ki.default-1341749340073\Cache emptied successfully
==== Empty Chrome Cache ======================
C:\Users\michael\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\michael\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted
==== EOF on 16.10.2013 at 10:38:51,32 ======================
|
|
16.10.2013, 18:38
| #27 |
| /// Helfer-Team | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Gibt es noch Probleme? |
|
16.10.2013, 19:20
| #28 |
| | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Hallo t'john, läuft wieder einwandfrei... ca. 3Min bootet beim Start ca. 1.30 Min herunterfahren mal schauen ob noch ne paar Dienste beim Start ausschalten kann.. die Seiten u. Link's öffnen sich jetzt schneller... Werbeeinblendungen(AdWare) ist zu 90% verschwunden.... Hiermit bedanke ich mich für deine "Topp-Hilfe"... Danke Gruß Meikel6460 |
|
20.10.2013, 08:13
| #29 |
| /// Helfer-Team | Vista startet/bootet sehr langsam durch "Virus" PUP.Optional Wenn du willst koennen wir noch weiter suchen. Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
|
Linear-Darstellung
