Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Danke für die Mitteilung aber was ist Schutzsoftware?
Schönen Abend noch. Spybot habe ich jetzt gelöscht
Guten Tag, es folgt Schritt 2, Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by vollman on 09.04.2014 at 10:01:40,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etype_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etype_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypesetup_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypesetup_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeuninstall_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeuninstall_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeupdate_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\etypeupdate_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{597b1823-7ff0-4cd3-8095-9d8cba514992}
~~~ Files
Successfully deleted: [File] "C:\Users\vollman\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\Users\vollman\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\Program Files (x86)\free video converter"
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0275903A-26D8-4F12-8B29-3D382C5DC0D1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0283D2A6-F6B2-4C75-852C-202DA3B1ABA1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{037AFDAC-E394-4223-9EC6-61B5C87EA4B0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{044EE419-64DF-4B84-9630-F9576241A1CC}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{055D8476-166B-4CCF-9882-7407F6D47D59}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{09C7DDBC-DB21-4B2E-A218-5B9C7EDBB5C8}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0BB85144-8015-490E-A446-890F69078FA5}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0CDC3620-E0AB-4BEA-8367-D6CC45170CD4}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0D20ECD6-56C2-42D6-8805-B5D687AD4D3D}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0D565C73-5667-4091-AE22-BA176C73C061}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0DE0EA2B-BCB0-450C-ACE1-7E9002FA777A}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{0F62AF1D-D049-4A2B-8714-678D70C49AB7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{142A3397-86D0-45DD-AC17-DA92D95D4FC3}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{168E78F0-0347-4AC2-8096-FD374DB3548B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{178DD8E6-8385-45B9-B45B-A3B62488A0F0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{195AB81C-56AA-4724-B93C-A558FDE57653}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{19FD08ED-72F9-4644-90C1-F3E8B89D7834}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{1CA0E77B-27EE-42DC-BA62-99EC5912982E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{207F634A-E150-42D1-9404-70315B9C73EE}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{21974318-00C6-4258-A9D5-4AB3B7EA188D}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{21CD4C71-4A4A-4E85-B8FD-5EDEEED764A7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{22D9E800-BDC5-471F-976E-22FE0BA54984}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{23165F7B-A900-470E-BE57-E4681B5B8416}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{26734383-0385-4A4E-A1AD-0F3663951472}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{269F6C4A-F49D-4F3C-A7EC-44CEC3A2F8EE}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{2A30386E-BBC8-47A7-907A-FBA846B54010}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{2C5AFAF7-5D2A-4AAD-BD26-FFF7601B1B11}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{2D8C4C14-9953-4D23-9483-D5C62FF269D8}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{2DA9FD17-E383-4485-9DFB-76B65D456947}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{32379324-9346-4099-95E5-3071C92694BC}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{32F090D7-5D39-44F2-8EFE-BA66A913C311}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{32FA72E8-0C40-46AD-9E78-8720EE9A593A}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{33692D1C-B6D6-4B32-BFA6-973BB3CFDE4A}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{35CE8382-0D16-4CCA-A186-7C43F73DEDA2}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{37DD61D5-2592-4073-9BEA-EC351854DDED}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{38C41A91-0A95-4672-B709-B1D2C24F8AEF}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{3B4E430C-DB5C-4833-BBD2-805C40D3B714}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4145DA1E-DAD7-4C23-B2B3-767B63906231}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{43B12E44-69AF-435D-A346-3F5C9770585B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{43E2882F-8C69-44AF-9CD3-2CC560DF8E61}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{44492D60-643F-4120-AE61-AE7F4BCFB1B8}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{461E5921-B0EB-4823-B0E9-5501D6ED1B68}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{46788BF9-A2F1-4393-B35F-EFC68D1F1168}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{471536BD-E0B2-4B86-9FB4-D7C0BC364932}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4718F466-00A8-4D2A-AF13-D1E9F8948D2C}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{477F054E-F238-489F-B07B-294D3AAACB80}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{47D533F0-33AD-4ED4-8A06-7FE8F89729A2}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4A3FCF7C-9F72-463E-9961-24FFF0181F83}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4A70C85C-C2DD-4F2D-AAE8-04EC10A199FE}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4C6B2B14-9DE4-4251-B28E-468B9FD74269}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4D59760C-F99D-47D5-9B31-85EB9E2783EE}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4E4C4D9A-D814-48A7-B433-E80D3610A5BC}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4FB53013-84BB-474C-8104-7F4B4BB067F6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4FB94708-0F47-4224-BC02-6222D1D79D65}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{4FD58B2C-9CCB-4889-BF98-570B7BFE4ED5}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{50DC7FF1-D83B-4296-A551-0DC64DA72231}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{51034D3F-E717-4C6A-ADDA-E633741F7803}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{525250A1-CB9B-4FBC-86E5-3E881E4E8DB7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{525DD723-0B81-42DB-A2D9-B5C2A2F18C35}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{53019CAF-742F-4957-A257-79D82353AA2E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{5382E120-FDB1-4FE7-9415-D9F5F1D1BD70}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{5615AC72-5C5D-4766-8A0F-1C424700F551}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{566C3E8B-674C-4876-A0BA-00A7499147DF}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{57090783-6B93-4ECD-B5A4-BB04C4B275E3}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{58501086-206E-436F-977F-2845C2FED8D4}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{5B206320-E512-4B87-9821-D483E37DF9E9}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{5C6C2BC6-4CFC-4F26-96DA-EFABD3DE6236}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{5F29864A-C4A1-4646-803D-DC147AD4ADB1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{5F81FCE2-A12A-4475-A7E8-207DA40D4351}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{619E6F99-09CA-4A32-9AA0-83F030492BF7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{61C73F5D-4728-41BE-9F75-6828CA56E5EE}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{635DAD17-2E94-4D15-994A-EE183094B860}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{673BC093-4DB0-439B-9E60-6A770544F90B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{6892C5BC-5BC2-431A-ACA3-0A288245DFB9}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{68AAD8DD-5185-411B-A9CF-D53FC8A965E1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{69ED0DE3-2803-4B12-919D-D9B43A5087F0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{6A63585A-5A25-4353-8176-D6105E5C1819}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{6DD3380E-74A9-4019-8CA0-3007692B0A9F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{6F6CA4AF-5EC4-4BA3-AF51-8144F34FC6D3}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{708CB4D5-84E0-4D8E-ACAC-55ED7D5361E0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7172DFEC-A473-4552-83BF-63583B23E83C}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7250A3AE-D8D7-4E5D-A0F5-076C0C9B0A5F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{748FC68B-7DBB-491C-B146-E5C9DF931F66}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{74D93A03-7BBF-4938-834C-866BF0EFBB2B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{76700FCF-10B9-4E68-AE0C-2C8ED009120E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{77DA307E-F3FB-4702-9FCC-D2AD91A2EA6C}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{77F310E7-1CFC-461E-BDE7-27619FBE215E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{783968E7-6011-438E-9DC1-C862DC97470D}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7AE07430-CC23-4388-8465-F1D3F81C54F1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7C494F9A-B736-4045-A71C-559E3876C047}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7CC01786-12BF-40C3-B962-CA5BCD01EE87}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7D089611-0AA6-4C29-86BF-0464A248B098}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7D73E7E4-CE49-46F1-82C1-BC5AF97DC313}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{7EF7C0F4-60FD-479A-8842-4237ED0ACE59}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{812BE4FA-F25F-431B-8C9C-B58DA71AA38B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{81356337-5C33-446A-BB54-A5B784EE5F98}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{82550C47-DB6F-4A53-AEBE-0465945267C3}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{83166963-9D53-4252-AAFF-5111DD352022}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{844BD76B-FC7D-4948-84BE-004F1F6DD8C6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{86DFB721-2062-474C-8811-3D47D4945087}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{876012B5-F516-43F5-A2B1-69FCB784B0ED}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{8780EED2-2491-4FCC-BCBD-A77B7104038B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{87FA0DE1-C530-44A2-9921-2C08579D454A}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{8886F071-9C77-403D-B36E-27671C629E6E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{8A599E66-CE44-44DD-96A2-68B581ACF8A7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{8BEA5D37-5F68-4B9B-BB64-6639E6AA23F0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{93DFD3E9-51E0-40DD-B3A0-CC82DB3A4F14}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{960CE743-2CB0-45E4-8A35-CB9EAD91A932}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{968E705E-6C0F-493D-B8A4-EC13D4294BE8}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{96A4349C-25CE-41CF-8E22-DFF2423320C7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{992137C0-0CFB-4727-800E-459998489FC7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{99AFCF64-9E7E-4926-8E2B-64D5B79E9F47}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{9AD1ED40-02A3-4FE0-93C0-066D150C676F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{9BEF6DD7-B937-4529-8771-C1CD933029F6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{9DF52109-A95C-48F6-BFD2-04C77F1BC1E1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{9EC4EC95-D439-4ADA-883D-1F19285A125E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A0741F1E-03FA-44DC-A93D-671CBA375D98}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A30D121E-F944-4781-8485-A78BAA0BCE38}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A3F45AD4-969C-4519-8D19-2D0BD0A8D75A}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A473FE04-4F5E-4680-8149-5227BE3D5B78}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A4D60427-6E5C-438B-A629-1B1CA77D3BC1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A4DD460E-E99A-419A-A817-E0988445A8C5}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A62832DC-878B-4E3F-8657-D97B530AA479}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A6902EAE-163B-49CE-A465-DB3A9B3B8569}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{A886DB58-4859-4A1C-9C35-76C02A2205C7}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{AB028CF1-5DDD-46F9-8CC6-BF2D59C76424}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{AC2A8A85-B0B5-42F6-BF0D-FF8E9FC280A6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{ACE067F3-9C2D-45D4-A4AF-6F00AF136FFD}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{AD6060FE-368E-45B6-9587-CEAD49C5D499}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B0D4BE6C-DE68-4C54-92E2-41F160B46902}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B13471A0-749C-4753-A70A-1E164E481323}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B1977291-FDB5-473D-A305-8D9EB64E6AB0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B383839B-3FCE-45B1-A918-383D788086AC}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B3A842D6-A8C4-44F0-98B4-C398438F6B2D}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B7115CA6-0D5F-4ABA-9DC8-66C8319CB06E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B7B8F97F-BF0C-4974-B43E-80B387C9D3D6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B7D2E3DF-3D7C-44ED-9B77-7C84F8C3E9D1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{B8753C37-4D7C-4E26-BBD8-FC7A964EA48C}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{BBD8CB2D-4835-4A11-AC5B-BFB3C655E1B6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{BBF8AA10-50D7-4D02-B8F8-F897D0C471C0}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{BC063966-53CE-4629-9053-BF054AAD429F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{BCE2D391-504B-4D28-B12C-11541D35400A}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C134044A-7E7C-4D8E-9DB2-0B913CACA6FD}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C13C52CD-6B9C-40F9-BDBA-33DCAF7216F2}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C5482FDB-C3A0-4F66-A748-4CAC97B86F25}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C58482F2-77A8-41C1-962E-25AC94A5CC32}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C64562DC-4C95-463B-9853-A1BBF1A6CA79}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C64BEB08-F145-4AA1-98CD-97ADC8C6A380}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C672083D-1B39-4161-A9E6-730A6BF106B5}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C6B60A8E-4D1A-4E2B-A134-8A06844BFBA2}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C70950DA-2E87-467E-B441-1AADD6054F3C}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C9BA6D81-5695-4087-86ED-B8D81D2A2144}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{C9E5CDB9-589B-4786-A2E4-88CB0F275D3D}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{CBD0C90A-2470-40C2-BEC9-AB1B4A9950E1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{CC393FCC-B6CE-4F75-8CD6-814D7DC86364}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{CC6BDB8F-79CB-4DFA-923E-11F9CBF552C1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{CDB5EDDD-88FD-452D-BD5B-22D685C6944F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{CFF18927-FCA6-47E9-8FBC-773552321811}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{D1D945BB-3B75-42E7-9D43-D3633E0B5F45}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{D544EB20-309B-4B95-99C2-6E6410C3F7AC}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{D756E973-52FB-45E3-B69C-58D92B8F2A58}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{D7CD01AA-2092-4E2F-AF19-ADC13B8DF6BE}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{D7D89030-1445-4A6A-BF64-E799B329211B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{D8A90DEC-5EEC-4537-9C3A-0A176D42F2E5}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{DA0942C9-292B-4ACA-9555-3D16774CE2A1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{DA2D5799-A8C9-40CA-8629-F2E9082DB03B}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{DA424E5D-B756-496E-AE71-07B6DE94A9B8}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{DC290E91-A9AC-4096-AC85-C130CE0D799F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{DDA57E44-E50A-43C8-BEEB-034397A3E3D2}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{DFAA3AB8-6D81-4939-90B7-AE326B8EEFA6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E0573B08-EEF0-440D-AE82-37E45AD1AEF4}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E23A43CB-0BFF-4709-8080-A6473B29CB94}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E3FBE439-37BB-4A49-BCC5-729FDB746467}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E41DF62D-F934-4229-895D-13425FF02D16}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E77E428A-8297-4726-9F79-73BC3B6650F9}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E8A36661-1F6C-46A2-8157-2A9855FAFE04}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E9465546-3513-4C98-8841-F3D5A888842F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E96B54E8-61E3-4D90-8E5F-0C38B04232B6}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{E9C8CA1B-D76A-42D5-9721-80B5BE3402F4}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{EBCE25AE-3E9A-4781-BEAB-F357B8B39648}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{ECE6759B-0C06-4A9A-B1C2-63BC07E4DF79}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{ED31F47A-14D7-4D83-BEFC-48E4D5F07509}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{EF175345-7435-499E-82C7-1CFC5C1693E1}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F19210E0-A9A8-4F4D-BF4B-E3B468A69F6D}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F3596896-EC72-4746-B3A0-6B0EE0ADDF21}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F39912B1-12A2-4B7C-AC4F-98D0F58C0B55}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F3B1AF78-FD6C-4C74-AF0C-780973F07664}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F3D0FA7F-1DB4-4117-A5D2-556BEEA56801}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F3F7FA2A-D8A5-4C5B-A98B-C77498CF6687}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F40F91A7-EB49-4707-8BAA-F14DBE9C338E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F4894014-2B08-4B6C-81A6-871424BB9483}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F5277CC3-BF42-4B98-92AF-1727F9E65851}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F741CD92-1777-46AC-A2AF-3EAB7E53842E}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{F75DBC40-602B-44AD-A60F-6D9E795C0189}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{FB22F3E7-6D04-41A4-BB92-5EFEE4A0AED8}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{FCA16BC3-7099-4EE5-9B71-2B3B5C01246F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{FCF784F2-347B-4801-82FF-26F09E0A223F}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{FE27BE14-05EF-46F9-ADE0-9F2B7A7F4305}
Successfully deleted: [Empty Folder] C:\Users\vollman\appdata\local\{FFA5E7E0-6AC2-4B3C-A909-742D4CD3D3F2}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.04.2014 at 10:08:38,27
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jetzt folgt Schritt 3, da habe ich einen Fehler gemacht, ( obwohl Du es so wunderbar beschrieben hast.)weil das Programm schon alle
Fehler gelöscht hat., Einige sind noch in Quarantäne. Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Suchlauf Datum: 09.04.2014
Suchlauf-Zeit: 11:13:53
Logdatei: WBAM.txt
Administrator: Ja
Version: 2.00.1.1004
Malware Datenbank: v2014.04.09.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: vollman
Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 287790
Verstrichene Zeit: 33 Min, 45 Sek
Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
Prozesse: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registrierungsschlüssel: 69
Trojan.Downloader, HKLM\SOFTWARE\CLASSES\APPID\{90A52F08-64AC-4DC6-9D7D-4516670275D3}, In Quarantäne, [cc34e7194eb227d9003fd068867cfc04],
Trojan.Downloader, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{90A52F08-64AC-4DC6-9D7D-4516670275D3}, In Quarantäne, [cc34e7194eb227d9003fd068867cfc04],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\APPID\{A2D3FB7A-6873-45E8-AF96-57092D721828}, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{A2D3FB7A-6873-45E8-AF96-57092D721828}, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A2D3FB7A-6873-45E8-AF96-57092D721828}, In Quarantäne, [728e669a59a75ea2412fcc4447bbb14f],
PUP.Optional.SaveSense.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{71e129ff-6c2a-4984-818c-7e2c998b8d99}, In Quarantäne, [2bd5e41cfb059967b8d732dcca38738d],
PUP.Optional.Datamngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}, In Quarantäne, [e21e9f61a25ea55b714631e63cc67888],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}, In Quarantäne, [e21e9f61a25ea55b714631e63cc67888],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}, In Quarantäne, [e21e9f61a25ea55b714631e63cc67888],
PUP.Optional.Datamngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}, In Quarantäne, [e21e9f61a25ea55b714631e63cc67888],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}, In Quarantäne, [e21e9f61a25ea55b714631e63cc67888],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}, In Quarantäne, [e21e9f61a25ea55b714631e63cc67888],
PUP.Optional.SweetPacks, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}, In Quarantäne, [936d09f743bdb34dec13838e6e94d927],
PUP.Optional.SweetPacks, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}, In Quarantäne, [936d09f743bdb34dec13838e6e94d927],
PUP.Optional.Datamngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [88784eb24eb2c53b62560710f2108080],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [88784eb24eb2c53b62560710f2108080],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [88784eb24eb2c53b62560710f2108080],
PUP.Optional.Datamngr.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [88784eb24eb2c53b62560710f2108080],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [88784eb24eb2c53b62560710f2108080],
PUP.Optional.Datamngr.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F34C9277-6577-4DFF-B2D7-7D58092F272F}, In Quarantäne, [88784eb24eb2c53b62560710f2108080],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}, In Quarantäne, [b14f4cb43bc5e21e24814cc5b949b749],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}, In Quarantäne, [b14f4cb43bc5e21e24814cc5b949b749],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLive.OneClickProcessLauncherMachine, In Quarantäne, [53ad8c7446ba6898c1b2475049bac43c],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoCreateAsync, In Quarantäne, [fb05ea16e71951af6e05badd6a9955ab],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreClass, In Quarantäne, [fc04cc3408f848b8d89b445325def709],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreClass.1, In Quarantäne, [847c8a7630d0a15f7ff46b2c986bef11],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CoreMachineClass, In Quarantäne, [e61aab558b759769a8cb4552f0132dd3],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.CredentialDialogMachine, In Quarantäne, [49b710f0f60ac937274c4d4ad13218e8],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachine, In Quarantäne, [e31d46ba8b7546ba0073abec5aa96d93],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [0000728e31cf57a9f57e2671689bc838],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.ProcessLauncher, In Quarantäne, [45bb936d2ed2d32d3f34a8ef9271f60a],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService, In Quarantäne, [06faaf5129d79c642d46079015ee16ea],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService.1.0, In Quarantäne, [619ffd0379876b9576fdc8cf33d060a0],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebMachine, In Quarantäne, [16ea01ff3ec2d729d0a31a7d18eb55ab],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebMachineFallback, In Quarantäne, [7e82a35d4eb2d62a93e06730c63de51b],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc, In Quarantäne, [46baa65af10f1de33043197ef40f6799],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc.1.0, In Quarantäne, [798728d8e51bd030195af1a69f64b848],
PUP.Optional.OKitSpace.A, HKLM\SOFTWARE\CLASSES\APPID\OKitSpace.DLL, In Quarantäne, [936d8e7290703dc3d5180f64847ee11f],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\CLASSES\APPID\SaveSenseLive.exe, In Quarantäne, [bf41c040ec140af63e34920558ab43bd],
PUP.Optional.OKitSpace.A, HKLM\SOFTWARE\WOW6432NODE\OKitSpace, In Quarantäne, [fe026e92b34d5ea2df104b28669ce51b],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLive.OneClickProcessLauncherMachine, In Quarantäne, [a9578f7138c81ae63142d7c09f64966a],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoCreateAsync, In Quarantäne, [f40c23ddc13f13edeb88aaed3fc4956b],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreClass, In Quarantäne, [649c718fbe4245bb41327c1b5da64bb5],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreClass.1, In Quarantäne, [ce329f6141bf2dd3bab9dabd956e06fa],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CoreMachineClass, In Quarantäne, [7c84986811efa35d7af985122fd4926e],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.CredentialDialogMachine, In Quarantäne, [c23e847cb94708f87bf8593e7093d32d],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachine, In Quarantäne, [bd430cf41fe1be42244ffa9d867da858],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [0cf40bf53ac69d634033187f22e1768a],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.ProcessLauncher, In Quarantäne, [2ed26b95758b0ef22d46207738cb2fd1],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService, In Quarantäne, [b050a65a758bdf21a0d3d6c1e41f21df],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3COMClassService.1.0, In Quarantäne, [0ef218e8e9178c74c5ae0f88dd2631cf],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebMachine, In Quarantäne, [f9076997c43c946cc3b00790cb38a759],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebMachineFallback, In Quarantäne, [956b619f41bf956b680be1b6ba4935cb],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc, In Quarantäne, [20e0649ca15f57a90a691f78b0534bb5],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SaveSenseLiveUpdate.Update3WebSvc.1.0, In Quarantäne, [e020f9076c94718f195a4b4cdb28dd23],
PUP.Optional.OKitSpace.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\OKitSpace.DLL, In Quarantäne, [42bec739f8082bd5df0e046f8d7533cd],
PUP.Optional.SaveSense.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\SaveSenseLive.exe, In Quarantäne, [8a76966abc442cd485ed5245ce35cd33],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-1.2, In Quarantäne, [857b09f7946c3ec25d9265ff43bfd828],
PUP.Optional.PriceGong.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, In Quarantäne, [e51bfb05ea165da3403ef775b34fed13],
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT, In Quarantäne, [12ee4eb22cd4de22e0b891fee023d32d],
PUP.Optional.PlurPush.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PlurPush, In Quarantäne, [46ba47b9e02001ff360998f82bd811ef],
PUP.Optional.SaveSense.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SaveSense, In Quarantäne, [2cd458a8d030738df67e8611758e24dc],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [dc24ab551fe1758bf7449fd35aa8c53b],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [e31d4cb42ad6629e02763c4cda29c040],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT2, In Quarantäne, [3ac642becd335fa1e59e78f9fb0716ea],
Registrierungswerte: 3
PUP.Optional.InstallBrain.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WNLT|URL, In Quarantäne, [12ee4eb22cd4de22e0b891fee023d32d],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0N2X1N, In Quarantäne, [e31d4cb42ad6629e02763c4cda29c040]
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1580234929-1931705971-1294809382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT2|Install, 1, In Quarantäne, [3ac642becd335fa1e59e78f9fb0716ea]
Registrierungsdaten: 5
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[f7091ee225dbe61aa34da772fd07ea16]
PUP.Optional.Snapdo, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}),Ersetzt,[67997e8223dd19e774f525f48b79cc34]
PUP.Optional.Snapdo, HKU\S-1-5-21-1580234929-1931705971-1294809382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}),Ersetzt,[c739b24e649cd030d4971108db298878]
PUP.Optional.Snapdo, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}),Ersetzt,[2ad69f618e727b8549208e8bd232da26]
PUP.Optional.Snapdo, HKU\S-1-5-21-1580234929-1931705971-1294809382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snap.do/?publisher=SnapdoOpenCandy&dpid=SnapdoOpenCandy&co=DE&userid=9f9165fe-1aa3-4eb5-8959-d9ac9a42d19b&searchtype=ds&q={searchTerms}),Ersetzt,[9b656b9548b8718ff774c356f113738d]
Ordner: 0
(No malicious items detected)
Dateien: 18
PUP.Optional.Rapiddown, C:\Users\vollman\AppData\Local\Temp\n8538\s8538.exe, In Quarantäne, [51afbe42bd4308f8058d6af052af3bc5],
PUP.Optional.Rapiddown, C:\Users\vollman\AppData\Local\Temp\n9119\s9119.exe, In Quarantäne, [986854ac3ec2738d682a203a4eb3b050],
PUP.Optional.Conduit, C:\Users\vollman\Downloads\FileConverter_1.3.exe, In Quarantäne, [c13f4ab6728ee7197a018ea144bcd927],
PUP.Optional.Somoto.A, C:\Users\vollman\Downloads\7ZipSetup.exe, In Quarantäne, [03fd9b6531cfe21ea85fad8b0df306fa],
PUP.Optional.RegCleanPro, C:\Users\vollman\Downloads\rcpsetup_2005.exe, In Quarantäne, [02fe000032ce3cc4761391a3a25e19e7],
PUP.Optional.Outbrowse, C:\Users\vollman\Downloads\setup.exe, In Quarantäne, [f60aee120ff143bd2abe139991726799],
PUP.LoadTubes, C:\Users\vollman\Downloads\setup_codec_3dx.exe, In Quarantäne, [ab5512eeef11cc340936f8a6a060b64a],
PUP.Optional.MindSpark.A, C:\Users\vollman\Downloads\VideoDownloadConvert (1).exe, In Quarantäne, [9f6128d8d7293fc196655f929a6927d9],
PUP.Optional.MindSpark.A, C:\Users\vollman\Downloads\VideoDownloadConvert.exe, In Quarantäne, [3ec21ce4b050718fec0f29c8cc371de3],
PUP.Optional.Mindspark, C:\Users\vollman\Downloads\VideoDownloadConvertCrxSetup.32264595-479A-4A40-A25D-E21990081E20.exe, In Quarantäne, [0ef29a66d62ac53b8b84ec0bdb287e82],
PUP.Optional.Softonic, C:\Users\vollman\Downloads\SoftonicDownloader_fuer_vidshot-capturer.exe, In Quarantäne, [ad536d9301ffa060ebdd00fd80800df3],
PUP.Optional.Download4Win, C:\Users\vollman\Downloads\FlashPlayer.exe, In Quarantäne, [3dc3b44c2fd17987f41f8f1fb152f50b],
PUP.Optional.BabylonToolBar.A, C:\Users\vollman\Downloads\installer_free_youtube_to_mp3_converter_3_9_40_Deutsch.exe, In Quarantäne, [36ca5ba5c739aa5646586ba5c73a7e82],
PUP.Optional.Outbrowse, C:\Users\vollman\Downloads\Java (1).exe, In Quarantäne, [7b85dd231ce40df35b6e416db84bed13],
PUP.Optional.BundleInstaller.A, C:\Users\vollman\Downloads\Java.exe, In Quarantäne, [60a0f50b7f8138c80fa9ad8be12041bf],
PUP.Optional.Conduit, C:\Users\vollman\Downloads\DVDVideoSoftTB_DE.exe, In Quarantäne, [00006e9257a92ed243385ad513ed8d73],
PUP.Optional.Koyote.A, C:\Users\vollman\Desktop\Homepage Programme\FreeVideoConverterSetup-r135-n-bc.exe, In Quarantäne, [5aa6fb0577899d634adb62d74cb550b0],
PUP.OfferBundler.ST, C:\Users\vollman\Desktop\Alle Ordner\downloads\SoftonicDownloader_fuer_pixillion.exe, In Quarantäne, [748c49b7a45c36ca5268acd707f9956b],
Physische Sektoren: 0
(No malicious items detected)
(end)
Code:
Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by vollman on 09.04.2014 at 13:11:47,73.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\vollman\Downloads\zoek (1).exe [Scan all users] [Script inserted]
==== System Restore Info ======================
09.04.2014 13:12:37 Zoek.exe System Restore Point Created Succesfully.
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Internet Explorer\SearchScopes\{F477E465-845D-4C75-BA05-323FB1D60129} deleted successfully
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78e516ef-11de-47a1-8364-a99b917ec5ee} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78e516ef-11de-47a1-8364-a99b917ec5ee} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{26B19FA4-E8A1-4A1B-A163-1A1E46F830DD} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{22DFBF5B-A7CD-4B25-9471-3DC68C71855F} deleted successfully
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{51A86BB3-6602-4C85-92A5-130EE4864F13} deleted successfully
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{7E111A5C-3D11-4F56-9463-5310C3C69025} deleted successfully
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\!{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\!{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\!{78e516ef-11de-47a1-8364-a99b917ec5ee} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\!{78e516ef-11de-47a1-8364-a99b917ec5ee} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\OKitSpace@OKitSpace.es deleted successfully
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\vollman\AppData\Roaming\TomTom\HOME\Profiles\4uwj83ko.default\prefs.js:
Added to C:\Users\vollman\AppData\Roaming\TomTom\HOME\Profiles\4uwj83ko.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
Deleted from C:\Users\vollman\AppData\Roaming\TomTom\HOME\Profiles\c0chrm3z.default\prefs.js:
Added to C:\Users\vollman\AppData\Roaming\TomTom\HOME\Profiles\c0chrm3z.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
==== Deleting Files \ Folders ======================
C:\PROGRA~3\{32364CEA-7855-4A3C-B674-53D8E9B97936} deleted
C:\PROGRA~3\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1} deleted
C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted
C:\PROGRA~3\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} deleted
C:\Users\vollman\daemonprocess.txt deleted
C:\Users\vollman\.android deleted
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\autoconfig.js deleted
C:\PROGRA~2\SearchNewTab deleted
C:\PROGRA~2\NCH Software\Components\NCHToolbars deleted
C:\Users\vollman\ChromeExtensions deleted
C:\PROGRA~3\Allmyapps deleted
C:\PROGRA~3\InstallMate deleted
C:\Users\vollman\AppData\Local\MyMovieMagnet.crx deleted
C:\Users\vollman\AppData\Local\CRE deleted
C:\Users\vollman\AppData\Local\avgchrome deleted
C:\Users\vollman\AppData\Local\cache deleted
C:\Users\vollman\Downloads\FreeYouTubeToMP3Converter.exe deleted
C:\Users\vollman\Downloads\FreeYouTubeToMP3Converter31212.exe deleted
C:\Users\vollman\AppData\LocalLow\SSearcaH-NewTaab deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\searchresultstb deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\ilividtoolbarguid deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\FileConverter_1.3 deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\PriceGong deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Conduit deleted
C:\Windows\wininit.ini deleted
C:\Windows\Syswow64\RegistryHelperLM.ocx deleted
C:\Users\vollman\Documents\PC Speed Maximizer deleted
"C:\PROGRA~3\920498150c2100c3\{4820778D-AB0D-6D18-C316-52A6A0E1D507}" deleted
"C:\PROGRA~3\920498150c2100c3\{4820778D-AB0D-6D18-C316-52A6A0E1D507}.old" deleted
"C:\PROGRA~3\920498150c2100c3\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}" deleted
"C:\PROGRA~3\920498150c2100c3\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}.old" deleted
"C:\PROGRA~3\920498150c2100c3\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}" deleted
"C:\PROGRA~3\920498150c2100c3\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}.old" deleted
"C:\PROGRA~3\920498150c2100c3\{E32743D3-5789-6E4F-3998-06FB87C9214B}" deleted
"C:\PROGRA~3\920498150c2100c3\{E32743D3-5789-6E4F-3998-06FB87C9214B}.old" deleted
"C:\PROGRA~3\920498150c2100c3" deleted
"C:\Users\vollman\AppData\Roaming\Vso" deleted
==== Firefox Extensions ======================
ProfilePath: C:\Users\vollman\AppData\Roaming\TomTom\HOME\Profiles\4uwj83ko.default
- Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com
- TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com
- Emulator - %ProfilePath%\extensions\Navcore.9.401.862279@tomtom.com
ExtDir: C:\Users\vollman\AppData\Roaming\Mozilla\Extensions
- Special Savings - %ExtDir%\specialsavings@vshsolutions.com
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
==== Firefox Plugins ======================
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
engeblojhfeingnjnfpiceofljnjpldp - C:\Users\vollman\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx[]
jbolfgndggfhhpbnkgnpjkfhinclbigj - No path found[]
khcceooakamlehbimaepcldnnlnkcmfk - C:\Program Files (x86)\SaveSense\SaveSense.crx[]
mkcedibhemacmilmkpndpkoidlnmgngg - C:\Users\vollman\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx[]
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
engeblojhfeingnjnfpiceofljnjpldp - C:\Users\vollman\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx[]
SecuritaScout - vollman\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkilfadjoneaheacgmkahfgcjchkpad
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.de/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://www.google.com"
@="hxxp://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://www.google.com/ie"
"SearchAssistant"="hxxp://www.google.com/ie"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{F477E465-845D-4C75-BA05-323FB1D60129}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F477E465-845D-4C75-BA05-323FB1D60129}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.de/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{597b1823-7ff0-4cd3-8095-9d8cba514992} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{AF96F089-2FB5-4949-BDD5-FE51ECE69557} (www.google.com) Google Url="https://www.google.com/search?q={searchTerms}"
==== Reset Google Chrome ======================
C:\Users\vollman\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\vollman\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1580234929-1931705971-1294809382-1000\Software\Microsoft\Internet Explorer\SearchScopes\{597b1823-7ff0-4cd3-8095-9d8cba514992} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0A218084-E447-749F-5259-197AFAE495D8} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{493B63F0-BB5B-044A-3116-A21B1D1C716E} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4BBEC367-FB2B-6F01-A927-A8EC0BFD96F6} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{590E9404-6AA3-1C38-D54E-03DDFEE1EE80} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7FAF6557-1E96-5320-3656-C1CF24B8A686} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\engeblojhfeingnjnfpiceofljnjpldp deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\khcceooakamlehbimaepcldnnlnkcmfk deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\engeblojhfeingnjnfpiceofljnjpldp deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spybot-S&D Cleaning deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\vollman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\vollman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\vollman\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=105 folders=49 68071944 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\vollman\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\vollman\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on 09.04.2014 at 13:32:00,85 ======================
Hallo Mathias, ich hoffe dass ich dank Deiner sehr ausführlichen Anleitung
alles richtig gemacht habe. Ich habe mein Virusprogramm Microsoft Essentielle gelöscht
und bitte mir mitzuteilen was ich nun benutzen soll.
Freundliche Grüße und einen schönen Tag Maria |
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 