Trojaner-Board - qvo6 problem

Code:

Zoek.exe Version 4.0.0.2 Updated 23-04-2013

Tool run by Alex on 02.05.2013 at 18:50:55,49.

Microsoft Windows 7 Professional  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected
 

==== Older Logs ======================
 

C:\zoek-results02.05.2013-1850.log        321 bytes
 

==== Deleting CLSID Registry Keys ======================
 

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
 

==== Deleting CLSID Registry Values ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
 

==== Deleting Services ======================
 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eSafeSvc deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\eSafeSvc deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\eSafeSvc deleted successfully
 

==== Deleting Files \ Folders ======================
 

"C:\Windows\tasks\PC Optimizer Pro64 startups.job" deleted

"C:\END" deleted

"C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\MACTrackBarLib.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll" deleted

"C:\Program Files (x86)\JDownloader" deleted

"C:\Program Files (x86)\Movie2KDownloader.com" deleted

"C:\Program Files (x86)\Common Files\DVDVideoSoft\TB" deleted

"C:\Program Files (x86)\Common Files\337" deleted

"C:\Program Files (x86)\hdvidcodec.com" deleted

"C:\Program Files (x86)\Gophoto.it" deleted

"C:\Users\Alex\AppData\Roaming\DesktopIconForAmazon" deleted

"C:\Users\Alex\AppData\Roaming\GoforFiles" deleted

"C:\Users\Alex\AppData\Roaming\eIntaller" deleted

"C:\Users\Alex\AppData\Roaming\Babylon" deleted

"C:\ProgramData\APN" deleted

"C:\ProgramData\eSafe" deleted

"C:\ProgramData\Tarma Installer" deleted

"C:\ProgramData\Babylon" deleted

"C:\Users\Alex\AppData\Local\Smartbar" deleted

"C:\Users\Alex\AppData\LocalLow\boost_interprocess" deleted

"C:\Users\Alex\AppData\LocalLow\Delta" deleted

"C:\Users\Alex\AppData\LocalLow\Smartbar" deleted

"C:\Windows\SysWow64\AI_RecycleBin" deleted

"C:\Windows\SysWow64\searchplugins" deleted

"C:\Windows\SysWow64\Extensions" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application" deleted

"C:\Users\Alex\AppData\Local\Smartbar\Application\de" deleted
 

==== Files Recently Created / Modified ======================
 

====== C:\Windows ====

====== C:\Users\Alex\AppData\Local\Temp ====

2013-05-02 07:37:13        3B32CAA07D672F8A2E0DF5CB3A873F45        22704        ----a-w-        C:\Users\Alex\AppData\Local\Temp\ESGScanner.sys

2013-05-02 07:35:25        2D3F145B357E282F01ED3B1DD0CD21E1        45937744        ----a-w-        C:\Users\Alex\AppData\Local\Temp\SHSetup.exe

2013-05-02 07:02:56        B22171908E066EE0445FCE6C8EA30633        42496        ----a-w-        C:\Users\Alex\AppData\Local\Temp\amazoninstallernircmdc.exe

2013-05-02 07:02:54        E0B80E6B894F6267A7E6FD88FBA18136        1258752        ----a-w-        C:\Users\Alex\AppData\Local\Temp\amazonicon.exe

2013-05-02 07:02:49        2ABCD4B961A059517A46322B2EC3FB6E        105040        ----a-w-        C:\Users\Alex\AppData\Local\Temp\qvo6.exe

2013-05-02 07:02:48        2F46A2E37FB05642A0E859545D6B09F7        854848        ----a-w-        C:\Users\Alex\AppData\Local\Temp\IminentSetup_1.0Hnjl76.10.exe

====== C:\Windows\SysWOW64 =====

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

====== C:\Windows\Sysnative\drivers =====

2013-05-02 07:37:13        3B32CAA07D672F8A2E0DF5CB3A873F45        22704        ----a-w-        C:\Windows\Sysnative\drivers\EsgScanner.sys

2013-04-24 13:03:20        B98F8C6E31CD07B2E6F71F7F648E38C0        1656680        ----a-w-        C:\Windows\Sysnative\drivers\ntfs.sys

2013-04-11 13:16:38        B4F53BCA4C688FF47F04FA90098F896E        194488        ----a-w-        C:\Windows\Sysnative\drivers\nvhda64v.sys

2013-04-11 13:16:38        4EE399576F76D38C04745DB739BBC8C7        11048736        ----a-w-        C:\Windows\Sysnative\drivers\nvlddmkm.sys

2013-04-10 09:27:44        8F6322049018354F45F05A2FD2D4E5E0        223752        ----a-w-        C:\Windows\Sysnative\drivers\fvevol.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-05-02 15:52:52        --------        d-----w-        C:\Program Files\Microsoft Silverlight

2013-05-02 07:37:05        --------        d-----w-        C:\Program Files\Enigma Software Group

======= C:\Program Files (x86) =====

2013-05-02 15:52:52        --------        d-----w-        C:\Program Files (x86)\Microsoft Silverlight

2013-05-02 07:53:51        --------        d-----w-        C:\Program Files (x86)\a-squared Free

2013-04-20 09:44:00        --------        d-----w-        C:\Program Files (x86)\MyVideoConverter Pro

2013-04-08 17:18:29        --------        d-----w-        C:\Program Files (x86)\Ubisoft

2013-04-08 17:07:59        --------        d-----w-        C:\Program Files (x86)\Mozilla Thunderbird

2013-04-06 21:30:32        --------        d-----w-        C:\Program Files (x86)\Common Files\SWF Studio

======= C: =====

2013-05-02 07:37:33        D41D8CD98F00B204E9800998ECF8427E        0        ----a-w-        C:\autoexec.bat

====== C:\Users\Alex\AppData\Roaming ======

2013-05-02 07:50:57        --------        d-----w-        C:\users\Alex\AppData\Roaming\QuickScan

2013-05-02 07:03:33        --------        d-----w-        C:\users\Alex\AppData\Roaming\Meine Traffic

2013-05-02 07:02:58        --------        d-----w-        C:\users\Alex\AppData\Local\Temp3dcbaea4ece7ad8ad338c57ba886b7ef

2013-05-02 07:02:57        --------        d-----w-        C:\users\Alex\AppData\Local\Temp0454623b0fa3a2887e20b510bda83262

2013-04-30 17:50:31        --------        d-----w-        C:\users\Alex\AppData\Roaming\Sierra

2013-04-25 17:26:06        --------        d-----w-        C:\users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WOT MODEL VIEWER

2013-04-25 17:25:34        --------        d-----w-        C:\users\Alex\AppData\Local\Apps

2013-04-25 17:25:33        --------        d-----w-        C:\users\Alex\AppData\Local\Deployment

2013-04-20 15:17:56        --------        d-----w-        C:\users\Alex\AppData\Locallow\Sun

2013-04-20 12:32:59        --------        d-----w-        C:\users\Alex\AppData\Local\Bus Simulator 2012

2013-04-20 11:38:50        --------        d-----w-        C:\users\Alex\AppData\Local\European Bus Simulator 2012

2013-04-20 09:38:38        --------        d-----w-        C:\users\Alex\AppData\Roaming\Apowersoft

2013-04-14 12:05:43        --------        d-----w-        C:\users\Alex\AppData\Roaming\HdO Adventure

2013-04-14 10:27:59        --------        d-----w-        C:\users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV

2013-04-14 09:35:16        --------        d-----w-        C:\users\Alex\AppData\Local\Rockstar Games

2013-04-09 13:45:44        --------        d-----w-        C:\users\Alex\AppData\Roaming\casualArts

2013-04-09 13:09:14        --------        d-----w-        C:\users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia

2013-04-08 17:36:51        --------        d-----w-        C:\users\Alex\AppData\Local\Ubisoft Game Launcher

====== C:\Users\Alex ======

2013-05-02 15:54:00        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2013-05-02 07:54:07        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free

2013-05-02 07:02:57        --------        d-----w-        C:\Users\Alex\ChromeExtensions

2013-04-30 17:50:06        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra

2013-04-20 11:34:43        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012

2013-04-14 15:56:15        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games

2013-04-14 11:58:21        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills

2013-04-14 09:30:40        --------        d-sh--w-        C:\ProgramData\SecuROM

2013-04-09 13:45:44        --------        d-----w-        C:\ProgramData\casualArts

2013-04-09 13:18:42        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver

2013-04-08 17:04:25        --------        d--h--w-        C:\Users\Alex\InstallAnywhere

2013-04-06 21:30:03        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\You don't know Jack 4

2013-04-06 21:02:13        --------        d-----w-        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCF4 - Madame Fate
 

====== C: exe-files ==

2013-05-02 14:46:26        22D3D73B2FA74C01D8D1CBA813D574B8        190411        ----a-w-        C:\Windows\6B6C4C461B7E4A419E70ACFBB22B1D81.TMP\WiseCustomCalla37.exe

2013-05-02 14:46:18        25D473D7805261C752DA738B13E35816        185271        ----a-w-        C:\Windows\6B6C4C461B7E4A419E70ACFBB22B1D81.TMP\WiseCustomCalla31.exe

2013-05-02 09:22:32        7D3F0E5B2FD0A47D80A94F159F88D2D9        1273071        ----a-w-        C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\705f49176579a643660bff5ff6ae3956\2626d97999d3735ba8ac24416416ca3e\tc6_install.exe

2013-05-02 09:21:58        3D5F99A49319F502E02ED4C650951F2A        613216        ----a-w-        C:\Users\Alex\Downloads\tc6_install.exe.exe

2013-05-02 09:09:37        EA895AC2B699F79FE594EC70DD4C3D5A        753664        ----a-w-        C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\9c01e5d71e442bf564f271e62b1d5357\AmazonIconInstaller.exe

2013-05-02 09:09:37        9F9AC223B0D6F029DCBFC5584116E96F        3575096        ----a-w-        C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\10806ff987a45c60eaa975e4aab3d1a1\pcspeedup.exe

2013-05-02 09:09:37        2B21AB11874AE169906FEE1DBDE6D3D0        883840        ----a-w-        C:\Users\Alex\AppData\Local\Temp\OCS\Downloads\0674e23d6502b36621d489f1b4fbd22a\b95706ead854d0c4800fb934759b1f23\Avira-DE-Cleaner.exe

2013-05-02 09:09:08        5B122B28A113E7CB9250E260EB23D173        339968        ----a-w-        C:\Users\Alex\AppData\Local\Temp\OCS\ocs_v7a.exe

2013-05-02 09:09:04        7C46F28F319F1E7407492ADC1D25286D        613952        ----a-w-        C:\Users\Alex\Downloads\Avira-DE-Cleaner-Downloader.exe

2013-05-02 07:53:55        AE7A5621F2266519DE90F5C441A54569        101000        ----a-w-        C:\Program Files (x86)\a-squared Free\a2upd.exe

2013-05-02 07:53:53        160270FB6706B45392B3C20753BEF1A9        1872320        ----a-w-        C:\Program Files (x86)\a-squared Free\a2service.exe

2013-05-02 07:53:52        D0D9ADFC8302CDB7A3FB19CC7BCF448D        1170304        ----a-w-        C:\Program Files (x86)\a-squared Free\a2free.exe

2013-05-02 07:53:51        F97A7C12E7E093918B77B18CD1923D1F        903312        ----a-w-        C:\Program Files (x86)\a-squared Free\a2cmd.exe

2013-05-02 07:53:51        168531B781D98EB33448008535D6F85E        991144        ----a-w-        C:\Program Files (x86)\a-squared Free\unins000.exe

2013-05-02 07:52:41        131195C019BA65272F06B4021BB20606        83704128        ----a-w-        C:\Users\Alex\Downloads\a2FreeSetup27.exe

2013-05-02 07:35:25        2D3F145B357E282F01ED3B1DD0CD21E1        45937744        ----a-w-        C:\Users\Alex\AppData\Local\Temp\SHSetup.exe

2013-05-02 07:03:19        679961DBF90452F472944013C3B2741B        1429584        ----a-w-        C:\Users\Alex\AppData\Local\Temp\Desk365\eInstall\eInstall.exe

2013-05-02 07:02:59        22BA8B50AF5F4FE3C4C8AAF5870B7137        331136        ----a-w-        C:\Users\Alex\Desktop\26.01.13\mt\Setup.exe

2013-05-02 07:02:56        E0B80E6B894F6267A7E6FD88FBA18136        1258752        ----a-w-        C:\Users\Alex\AppData\Local\Temp\dca5cecae03cf228814e2e7bb36ae1c6\amazonicon.exe

2013-05-02 07:02:56        B22171908E066EE0445FCE6C8EA30633        42496        ----a-w-        C:\Users\Alex\AppData\Local\Temp\amazoninstallernircmdc.exe

2013-05-02 07:02:55        2F46A2E37FB05642A0E859545D6B09F7        854848        ----a-w-        C:\Users\Alex\AppData\Local\Temp\383c717c3b02aa1e5df72219c11cac6d\IminentSetup_1.0Hnjl76.10.exe

2013-05-02 07:02:55        2ABCD4B961A059517A46322B2EC3FB6E        105040        ----a-w-        C:\Users\Alex\AppData\Local\Temp\615740aeb16670034e62aed0449c4dfd\qvo6.exe

2013-05-02 07:02:54        E0B80E6B894F6267A7E6FD88FBA18136        1258752        ----a-w-        C:\Users\Alex\AppData\Local\Temp\amazonicon.exe

2013-05-02 07:02:49        2ABCD4B961A059517A46322B2EC3FB6E        105040        ----a-w-        C:\Users\Alex\AppData\Local\Temp\qvo6.exe

2013-05-02 07:02:48        2F46A2E37FB05642A0E859545D6B09F7        854848        ----a-w-        C:\Users\Alex\AppData\Local\Temp\IminentSetup_1.0Hnjl76.10.exe

2013-05-02 07:01:48        558A71E091285DE63CCBB125B883AABE        1162496        ----a-w-        C:\Users\Alex\Downloads\Mein-Traffic-Setup.exe

2013-05-01 10:03:43        0D40E080353F33F469C1295719C22DEE        53135360        ----a-r-        C:\Users\Alex\Desktop\Neuer Ordner\FM2013 Crack\Manager13.exe

2013-04-30 19:36:43        8BE25E7B99FEF9792325090A050EF429        503079504        ----a-w-        C:\Users\Alex\Downloads\Leisure.Suit.Larrys.Greatest.Hits.and.Misses-GoodOldGames\setup_leisure_suit_larry_2.0.0.15.exe

2013-04-25 17:26:06        C811D9A69FC58DE2B01BD132EF8D54EB        765952        ------w-        C:\Users\Alex\AppData\Local\Apps\2.0\RXTHCG3V.QLE\DQADKTY2.YT3\mode..tion_4dc50946373bf705_0002.0000_4c92121947e52818\Model_Viewer.exe

=== C: other files ==

2013-05-02 08:56:30        0AC60EFE7A554E9114AD9598FA143EC2        2230623        ----a-w-        C:\Users\Alex\Downloads\WOT Mods\3903-shkurka-dlya-vk3601h-anime-skin-wot-manual.zip

2013-05-02 07:37:33        D41D8CD98F00B204E9800998ECF8427E        0        ----a-w-        C:\autoexec.bat

2013-05-02 07:37:13        3B32CAA07D672F8A2E0DF5CB3A873F45        22704        ----a-w-        C:\Windows\System32\drivers\EsgScanner.sys

2013-05-02 07:37:13        3B32CAA07D672F8A2E0DF5CB3A873F45        22704        ----a-w-        C:\Users\Alex\AppData\Local\Temp\ESGScanner.sys

2013-05-02 07:02:58        C191C3FA9BA5FBCBE85A4E3B83002A94        23713        ----a-w-        C:\Users\Alex\AppData\Local\Temp\scoped_dir_4056_18093\amazon.crx

2013-05-02 07:02:58        60DD7AD17780A514EBB8DC7FE2B30DC2        2591744        ----a-w-        C:\Users\Alex\AppData\Local\Temp\OptimizerPro_new.zip

2013-05-02 07:02:57        C191C3FA9BA5FBCBE85A4E3B83002A94        23713        ----a-w-        C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx

2013-05-02 07:02:57        C191C3FA9BA5FBCBE85A4E3B83002A94        23713        ----a-w-        C:\Users\Alex\AppData\Local\Temp\amazon.crx

2013-05-02 07:02:57        7E75DF97F3D99BFAECE7C19043AA9DAC        4299        ----a-w-        C:\Users\Alex\AppData\Local\Temp\amazon.xpi

2013-05-02 07:02:46        CC3CD783263F3B582F6DC509F4B3373B        815948        ----a-w-        C:\Users\Alex\AppData\Local\Temp\mt.zip

2013-04-30 10:33:21        9A23FA3EA70AC8EF67FE3A0815C968C6        1805805        ----a-w-        C:\Users\Alex\Downloads\WOT Mods\1274-anime-shkurka-dlya-is-8-wot-manual.zip

2013-04-30 10:32:27        ED6BB712190BB3EE14DAE597397AA89F        3796321        ----a-w-        C:\Users\Alex\Downloads\WOT Mods\1274-anime-shkurka-dlya-is-8-wot.zip
 

==== Firefox Extensions ======================
 

ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\extensions

- Amazon-Icon - %ProfilePath%\extensions\amazon-icon@winload.de
 

==== Firefox Plugins ======================
 
 

==== Chrome Look ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

blaofbhgbmeikidhlkmjhbkbfohpgekf - C:\Program Files (x86)\Movie2KDownloader.com\Movie2KDownloader10.crx[]

idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29.11.2012 21:35]

mkcedibhemacmilmkpndpkoidlnmgngg - C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx[02.05.2013 09:02]

nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[07.02.2013 07:47]

pfmopbbadnfoelckkcmjjeaaegjpjjbk - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx[]
 

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

amfclgbdpgndipgoegfpkkgobahigbcl - C:\Users\Alex\AppData\Local\Smartbar/Application\1Extension.crx[]
 

Last updated at time on date - Alex - Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb

RealDownloader - Alex - Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji

DivX Plus Web Player HTML5 \u003Cvideo\u003E - Alex - Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm

Bitdefender QuickScan - Alex - Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

Where is my water? - Alex - Default\Extensions\plgellfihbddhjgclldmelbgepdlpapc
 

==== Set IE to Default ======================
 

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="hxxp://www.google.de/"

"Search Page"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"

"Default_Page_URL"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"

"Search Bar"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"

"Use Search Asst"="yes"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"

"Start Page"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"

"Start Page"="hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]

"Default"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]

"Default"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"Default"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=DE&userid=9f8764bd-c76e-4e3f-9646-4be97ea20f6f&searchtype=ds&q={searchTerms}&installDate=03/04/2013"

"SearchAssistant"="hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=4587570"

"CustomizeSearch"="hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=4587570"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{006ee092-9658-4fd6-bd8e-a21a348e59f5}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}] not found
 

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"

"Search Bar"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"

"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

"Start Page"="hxxp://www.google.de/"

"Use Search Asst"="no"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="hxxp://search.msn.com/results.asp?q=%s"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="hxxp://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="hxxp://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"

"CustomizeSearch"="hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"

"SearchAssistant"="hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
 

==== All HKCU SearchScopes ======================
 

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{33BB0A4E-99AF-4226-BDF6-49120163DE86} Unknown  Url="Not_Found"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
 

==== Deleting CLSID Registry Keys ======================
 

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} deleted successfully
 

==== Deleting CLSID Registry Values ======================
 
 

==== shortcuts on Users Desktops ======================
 

C:\Users\Alex\Desktop\Spiele\Driver San Francisco - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\European Bus Simulator Basic 2012.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Bin32\BusSimulator2012.exe 

C:\Users\Alex\Desktop\Spiele\LaunchEFLC - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\LaunchGTAIV - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\Lost Horizon.lnk - D:\Spiele\Deep Silver\Lost Horizon\AutoStarter.exe 

C:\Users\Alex\Desktop\Spiele\Rockstar Games Social Club.lnk - D:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe 

C:\Users\Alex\Desktop\Spiele\SIERW5 - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\You don't know Jack 4.lnk - D:\Spiele\You don't know Jack 4\YDKJ 4.exe 

C:\Users\Alex\Desktop\Spiele\Wimmelbild\FBI - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\Wimmelbild\Frankenstein - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\Wimmelbild\MCF4 - Madame Fate.lnk - D:\Spiele\MCF4 - Madame Fate\MadameFate.exe 

C:\Users\Alex\Desktop\Spiele\Wimmelbild\Mystery Murders - Jack the Ripper 2.lnk - D:\Spiele\Rondomedia\Mystery Murders - Jack the Ripper 2\jackTheRipper2.exe 

C:\Users\Alex\Desktop\Spiele\Wimmelbild\Nemo - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\Wimmelbild\Profiler - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\Wimmelbild\TimeMachine - Verknüpfung.lnk -  

C:\Users\Alex\Desktop\Spiele\Wimmelbild\Vatican - Verknüpfung.lnk -  

C:\Users\UpdatusUser\Desktop\MyVideoConverter Pro.lnk - C:\Program Files (x86)\MyVideoConverter Pro\MyVideoConverter_pro.exe 
 

==== shortcuts on All Users Desktop ======================
 

C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe 

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187
 

==== shortcuts in Users Start Menu ======================
 

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Command line documentation.lnk - C:\Users\Alex\AppData\Local\New Technology Studio\Apps\OpenIV\command line.txt 

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Go to OpenIV web site.lnk -  

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Run OpenIV.lnk - C:\Users\Alex\AppData\Local\New Technology Studio\Apps\OpenIV\OpenIV.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenIV\Uninstall OpenIV.lnk - C:\Users\Alex\AppData\Local\New Technology Studio\Apps\OpenIV\uninstall.exe -uninstall

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Mystery Murders - Jack the Ripper 2\Mystery Murders - Jack the Ripper 2 Uninstaller.lnk - D:\Spiele\Rondomedia\Mystery Murders - Jack the Ripper 2\Uninstall.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rondomedia\Mystery Murders - Jack the Ripper 2\Mystery Murders - Jack the Ripper 2.lnk - D:\Spiele\Rondomedia\Mystery Murders - Jack the Ripper 2\jackTheRipper2.exe 
 

==== shortcuts in All Users Start Menu ======================
 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\SIGNINOPTIONS.EXE 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\a-squared Free.lnk - C:\Program Files (x86)\a-squared Free\a2free.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\a-squared Homepage.lnk - C:\Program Files (x86)\a-squared Free\a-squared homepage.url 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\Deinstallieren.lnk - C:\Program Files (x86)\a-squared Free\unins000.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\Scan Berichte.lnk - C:\Users\Alex\Documents\a-squared Free\Reports 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\a-squared Free\Scansets.lnk - C:\Users\Alex\Documents\a-squared Free\Scansets 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Lost Horizon deinstallieren.lnk - C:\Program Files (x86)\InstallShield Installation Information\{850FD908-5381-4D6D-BE6E-8E489B366FFF}\setup.exe -runfromtemp -l0x0407

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Lost Horizon Liesmich-Datei anzeigen.lnk - D:\Spiele\Deep Silver\Lost Horizon\Autostarter\LiesMich.txt 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Lost Horizon starten.lnk - D:\Spiele\Deep Silver\Lost Horizon\Autostarter.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Lost Horizon\Spieleinstellungen anzeigen.lnk - D:\Spiele\Deep Silver\Lost Horizon\ConfigTool.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\Codec-Einstellungen.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=decoder

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\DivX Plus Player.lnk - C:\Program Files (x86)\DivX\DivX Plus Player\DivX Plus Player.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\DivX Technische Unterstützung.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\Nach Updates suchen.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=update

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus\Registrieren.lnk - C:\Program Files (x86)\DivX\DivX Control Panel\DivXControlPanelLauncher.exe /start=registration

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Deinstallieren.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\unins000.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware Wächter.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Anti-Malware.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft HiJackFree.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2HiJackFree.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Emsisoft Homepage.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\Emsisoft.url 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Hilfe.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\de-de.chm 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Scan Berichte.lnk - C:\Users\Alex\Documents\Anti-Malware\Reports 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware\Scansets.lnk - C:\Users\Alex\Documents\Anti-Malware\Scansets 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Manual.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Manual_EuropeanBusSimulator2012_UK.pdf 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Play European Bus Simulator 2012 Basic.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Bin32\BusSimulator2012.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Play European Bus Simulator 2012 High.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Bin64\BusSimulator2012.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Read Me v1.3.1 Update.lnk - D:\Spiele\astragon\European Bus Simulator 2012\Readme_v1_3_1.TXT 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\European Bus Simulator 2012\Uninstall European Bus Simulator 2012.lnk - D:\Spiele\astragon\European Bus Simulator 2012\unins000.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Driver San Francisco.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Grand Theft Auto Episodes from Liberty City.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Grand Theft Auto IV.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Lost Horizon.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCF4 - Madame Fate\MCF4 - Madame Fate.lnk - D:\Spiele\MCF4 - Madame Fate\MadameFate.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /show

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /disable

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /enable

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\20.000 Meilen unter dem Meer\20.000 Meilen unter dem Meer deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {6692A6CC-6EDA-40C3-8F57-1E8ECD5AE2E0}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\20.000 Meilen unter dem Meer\20.000 Meilen unter dem Meer.lnk - D:\Spiele\Purplehills\20.000 Meilen unter dem Meer\Nemo.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\FBI\Deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {41E21FBD-DE0F-46D9-8B6C-534DD13DBBB6}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\FBI\FBI.lnk - C:\Windows\Installer\{41E21FBD-DE0F-46D9-8B6C-534DD13DBBB6}\FBI.exe_F902CE676106409181B4C13DA8BF9AC7.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Frankenstein\Frankenstein deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {610B773E-3183-43D5-B01D-862EFF276B81}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Frankenstein\Frankenstein.lnk - D:\Spiele\Purplehills\Frankenstein\Frankenstein.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Profiler\Profiler deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {164B5A9F-D9BD-4EC3-880E-61A4E6935EEB}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Profiler\Profiler.lnk - D:\Spiele\Purplehills\Profiler\Profiler.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Secrets of Vatican\Secrets of Vatican deintallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {66B76A83-4B3A-4218-82A4-862E26B745CA}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Secrets of Vatican\Secrets of Vatican.lnk - D:\Spiele\Purplehills\Secrets of Vatican\Vatican.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Time Machine\Time Machine deinstallieren.lnk - C:\Windows\SysWOW64\msiexec.exe /x {9F9D845C-A5F0-423B-9820-240771C7645D}

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PurpleHills\Time Machine\Time Machine.lnk - D:\Spiele\Purplehills\Time Machine\TimeMachine.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Rockstar Games Social Club.lnk - D:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Grand Theft Auto IV\Grand Theft Auto IV.lnk - D:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe -safemode

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games\Grand Theft Auto IV\Lizenz widerrufen.lnk - D:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe  /revoke

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra\Leisure Suit Larry 7\Leisure Suit Larry 7.lnk - D:\Spiele\Sierra\Leisure Suit Larry 7\SIERW5.EXE 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\You don't know Jack 4\You don't know Jack 4 entfernen.lnk - D:\Spiele\You don't know Jack 4\unins000.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\You don't know Jack 4\You don't know Jack 4.lnk - D:\Spiele\You don't know Jack 4\YDKJ 4.exe 
 

==== shortcuts in Quick Launch ======================
 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\a-squared Free.lnk - C:\Program Files (x86)\a-squared Free\a2free.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Emsisoft Anti-Malware.lnk - C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Thunderbird.lnk - C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
 

==== shortcuts After Repair ======================
 

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe -extoff

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe 

C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
 

==== Deleting Registry Keys ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk deleted successfully

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl deleted successfully
 

==== Empty IE Cache ======================
 

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Alex\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
 

==== Empty FireFox Cache ======================
 

No FireFox Cache found
 

==== Empty Chrome Cache ======================
 

C:\users\Alex\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
 

==== Empty All Flash Cache ======================
 

Flash Cache Emptied Successfully
 

==== Empty All Java Cache ======================
 

No Java Cache Found
 

After Reboot
 

==== Empty Temp Folders ======================
 

C:\Windows\Temp successfully emptied

C:\Users\Alex\AppData\Local\Temp successfully emptied
 

==== Empty Recycle Bin ======================
 

C:\$RECYCLE.BIN successfully emptied

wenn ich nochmal zoek machen soll, kommt diese Meldung:

C:\Users\Alex\AppData\Local\Temp\PEVZ.EXE ist keine zulässige Win32-Anwendung

Code:

Zoek.exe Version 4.0.0.2 Updated 23-04-2013

Tool run by Alex on 02.05.2013 at 19:44:44,29.

Microsoft Windows 7 Professional  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected
 

==== Possible Rootkit Infection ======================
 

C:\Windows\system32\services.exe Possible Infected!
 

==== Deleting Files \ Folders ======================
 
 

==== Startup Registry Enabled ======================
 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"

"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe  -osboot"
 

[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DivXMediaServer"="C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"

"TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe  -osboot"

"emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe /d=60"
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"

"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe  -osboot"
 

==== Startup Registry Enabled x64 ======================
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s"

"CmPCIaudio"="C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd"

"IntelliType Pro"="C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"

"IntelliPoint"="C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"

"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"
 

==== Startup Registry Disabled ======================
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"TkBellExe"="\"C:\\Program Files (x86)\\Real\\RealPlayer\\update\\realsched.exe\"  -osboot"

"UVS11 Preload"="C:\\Program Files (x86)\\Ulead Systems\\Ulead VideoStudio 11\\uvPL.exe"

"DivXUpdate"="\"C:\\Program Files (x86)\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW"
 
 

==== Task Scheduler Jobs ======================

Code:

Zoek.exe Version 4.0.0.2 Updated 23-04-2013

Tool run by Alex on 02.05.2013 at 19:49:30,47.

Microsoft Windows 7 Professional  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected
 

==== Possible Rootkit Infection ======================
 

C:\Windows\system32\services.exe Possible Infected!
 

==== Deleting Files \ Folders ======================
 
 

==== Startup Registry Enabled ======================
 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"

"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe  -osboot"
 

[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DivXMediaServer"="C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"

"TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe  -osboot"

"emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe /d=60"
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Browser Infrastructure Helper"="C:\Users\Alex\AppData\Local\Smartbar\Application\QuickShare.exe startup"

"MsgCenterExe"="C:\Program Files (x86)\Real\RealPlayer\update\RealOneMessageCenter.exe  -osboot"
 

==== Startup Registry Enabled x64 ======================
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s"

"CmPCIaudio"="C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd"

"IntelliType Pro"="C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"

"IntelliPoint"="C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"

"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"
 

==== Startup Registry Disabled ======================
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"TkBellExe"="\"C:\\Program Files (x86)\\Real\\RealPlayer\\update\\realsched.exe\"  -osboot"

"UVS11 Preload"="C:\\Program Files (x86)\\Ulead Systems\\Ulead VideoStudio 11\\uvPL.exe"

"DivXUpdate"="\"C:\\Program Files (x86)\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW"
 
 

==== Task Scheduler Jobs ======================
 
 

==== Chrome Look ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29.11.2012 21:35]

mkcedibhemacmilmkpndpkoidlnmgngg - C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx[02.05.2013 09:02]

nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[07.02.2013 07:47]
 

==== Chrome Fix ======================
 

C:\Users\Alex\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx deleted successfully
 

==== Deleting CLSID Registry Keys ======================
 

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} deleted successfully
 

==== Deleting CLSID Registry Values ======================
 

HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully

HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully

HKEY_USERS\S-1-5-21-3833738761-3407712013-1824015166-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{CFBFAE00-17A6-11D0-99CB-00C04FD64497} deleted successfully
 

==== Deleting Registry Keys ======================
 

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg deleted successfully

und einmal Adwcleaner

Code:

# AdwCleaner v2.300 - Datei am 02/05/2013 um 19:53:58 erstellt

# Aktualisiert am 28/04/2013 von Xplode

# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)

# Benutzer : Alex - PEACHY

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Alex\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk

Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com
 

***** [Registrierungsdatenbank] *****
 

Daten Gelöscht : HKLM\...\StartMenuInternet\Google Chrome [(Default)] = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

Daten Gelöscht : HKLM\...\StartMenuInternet\IEXPLORE.EXE [(Default)] = C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187

Schlüssel Gelöscht : HKCU\Software\1ClickDownload

Schlüssel Gelöscht : HKCU\Software\DataMngr

Schlüssel Gelöscht : HKCU\Software\Iminent

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\pc optimizer pro

Schlüssel Gelöscht : HKCU\Software\SmartBar

Schlüssel Gelöscht : HKCU\Software\SmartbarBackup

Schlüssel Gelöscht : HKCU\Software\SmartbarLog

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\d0dad1b538ea17

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BHO

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Desksvc

Schlüssel Gelöscht : HKLM\Software\eSafeSecControl

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS

Schlüssel Gelöscht : HKLM\Software\qvo6Software

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\eSafeSecControl

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16537
 

Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187 --> hxxp://www.google.com

Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.qvo6.com/?utm_source=b&utm_medium=wld&from=wld&uid=WDCXWD5000AAKS-00UU3A0_WD-WCAYU600309203092&ts=1367478187 --> hxxp://www.google.com
 

-\\ Google Chrome v26.0.1410.64
 

Datei : C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[S1].txt - [15349 octets] - [02/05/2013 19:53:58]
 

########## EOF - C:\AdwCleaner[S1].txt - [15410 octets] ##########