Icq Worm

Aufgrund von notwendige Wartungsarbeiten am Server kann es zu kurzen Downtimes und längere Ladezeiten kommen.

    Hallo zusammen, vllt kann mir hier jemand helfen ich habe von pc dingen nicht so die ahnung!
    hab mir son scheiß virus über icq geangelt. mein antivirus programm erkennt den auch, aber kriegt den nich weg, da sind irgendwie mehrere viren!! kann mir jemand helfen- bin total am verzweifeln.....

    bitte helft mir...
    pro_pk

    der erste schritt klappt schon bei mir nicht,

    1. Führe zuerst a-squared Web Malware Scanner Online Scan durch (Mit dem Internet Explorer!)

    da steht : its not allowedt o use the scanner on third party websites. please go to http://www.emisoft.com

    weißte was ich jetzt machen muss???

    WICHTIG:
    Gibt es Probleme bei einem Punkt, versuche es erneut nach einem Neustart, besteht das Problem weiterhin, dann gehe einfach zum nächsten Punkt.

    Berichte nach Abarbeitung aller Punkte, dann in deinem Thread kurz welcher Punkt nicht durchgeführt werden konnte.

    habe den avg scan gemacht konnt e die funde aber nicht löschen da stand nur - einaml ignorieren??!

    hier ist der report:

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan-Bericht
    ---------------------------------------------------------

    + Erstellt um: 12:31:41 14.04.2007

    + Scan-Ergebnis:


    C:\Program Files\Zango\bak\zango.exe -> Adware.180Solutions : Ignoriert.
    C:\WINDOWS\Downloaded Program Files\ClientAX.dll -> Adware.180Solutions : Ignoriert.
    D:\Programme\BearShare\BearShareZangoInstaller.exe/clientax.dll -> Adware.180Solutions : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller -> Adware.180Solutions : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller.1 -> Adware.180Solutions : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller\CLSID -> Adware.180Solutions : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller\CurVer -> Adware.180Solutions : Ignoriert.
    C:\Program Files\Altnet -> Adware.Altnet : Ignoriert.
    C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Ignoriert.
    D:\Program Files\Altnet\Download Manager\asm.exe -> Adware.Altnet : Ignoriert.
    D:\Program Files\Altnet\Download Manager\asmps.dll -> Adware.Altnet : Ignoriert.
    HKLM\SOFTWARE\Altnet -> Adware.Altnet : Ignoriert.
    HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Ignoriert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Ignoriert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Ignoriert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Ignoriert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Ignoriert.
    C:\WINDOWS\system32\AdCache -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_0_0_106800.htm -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_1_0_449200.gif -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_2_0_106800.htm -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_3_0_106800.htm -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_111600.htm -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_152400.htm -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_155300.htm -> Adware.Cydoor : Ignoriert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_164100.htm -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0\Seqn_1068 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0\Seqn_4492 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0\Seqn_1068 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0\Seqn_1068 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1116 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1524 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1553 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1641 -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Queue -> Adware.Cydoor : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Status -> Adware.Cydoor : Ignoriert.
    HKLM\SOFTWARE\Gator.com -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\GInternet -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\GInternet\Proxy -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_gi -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_trickle -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_ts -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GUS -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Gator.com\Gator\stat -> Adware.Gator : Ignoriert.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoriert.
    D:\Programme\WinFixer 2005\FixCore.dll -> Adware.SafeError : Ignoriert.
    C:\Program Files\SpySheriff -> Adware.SpySheriff : Ignoriert.
    C:\Program Files\SpySheriff\Uninstall.exe -> Adware.SpySheriff : Ignoriert.
    C:\Program Files\Zango\bak\zango.exe/Plugins\npclntax.dll -> Adware.Zango : Ignoriert.
    C:\Program Files\Zango\zangohook.dll -> Adware.Zango : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent -> Adware.Zango : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent.1 -> Adware.Zango : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent\CLSID -> Adware.Zango : Ignoriert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent\CurVer -> Adware.Zango : Ignoriert.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zango -> Adware.Zango : Ignoriert.
    HKLM\SOFTWARE\zango -> Adware.Zango : Ignoriert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\zango -> Adware.Zango : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089501.exe -> Downloader.Agent.awf : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089503.exe -> Downloader.Agent.awf : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089505.exe -> Downloader.Agent.awf : Ignoriert.
    D:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089504.exe -> Downloader.Agent.awf : Ignoriert.
    C:\Documents and Settings\Philipp\Cookies\philipp@adtech[2].txt -> TrackingCookie.Adtech : Ignoriert.
    C:\Documents and Settings\Philipp\Cookies\philipp@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoriert.
    C:\Documents and Settings\Philipp\Cookies\philipp@ivwbox[1].txt -> TrackingCookie.Ivwbox : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP392\A0086255.exe -> Worm.Warezov.cu : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091533.dll -> Worm.Warezov.hx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091535.dll -> Worm.Warezov.hx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP393\A0086404.exe -> Worm.Warezov.lj : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089507.exe -> Worm.Warezov.mg : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091534.dll -> Worm.Warezov.mg : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP395\A0087482.exe -> Worm.Warezov.mo : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP395\A0088473.dll -> Worm.Warezov.mo : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP392\A0086244.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP392\A0086258.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP392\A0086367.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP392\A0086388.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP393\A0086407.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP393\A0086416.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP393\A0086427.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP393\A0087427.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP393\A0087437.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP394\A0087454.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP394\A0087475.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP395\A0087485.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP395\A0088486.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP395\A0088499.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089497.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0089499.dll -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091523.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091527.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091528.dll -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091536.dll -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091540.dll -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091550.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091551.exe -> Worm.Warezov.mx : Ignoriert.
    C:\System Volume Information\_restore{39B51A0E-897F-43C4-911A-4F380AAD6415}\RP396\A0091552.dll -> Worm.Warezov.mx : Ignoriert.


    ::Berichtende

    war mir noch krad den frust von der seele joggen:

    hier ist der report- diesmal wurde alles gelöscht:

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan-Bericht
    ---------------------------------------------------------

    + Erstellt um: 14:51:23 14.04.2007

    + Scan-Ergebnis:


    C:\Program Files\Zango\bak\zango.exe -> Adware.180Solutions : Gesäubert.
    C:\WINDOWS\Downloaded Program Files\ClientAX.dll -> Adware.180Solutions : Gesäubert.
    D:\Programme\BearShare\BearShareZangoInstaller.exe/clientax.dll -> Adware.180Solutions : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller -> Adware.180Solutions : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller.1 -> Adware.180Solutions : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller\CLSID -> Adware.180Solutions : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.ClientInstaller\CurVer -> Adware.180Solutions : Gesäubert.
    C:\Program Files\Altnet -> Adware.Altnet : Gesäubert.
    C:\Program Files\Altnet\My Altnet Shares -> Adware.Altnet : Gesäubert.
    D:\Program Files\Altnet\Download Manager\asm.exe -> Adware.Altnet : Gesäubert.
    D:\Program Files\Altnet\Download Manager\asmps.dll -> Adware.Altnet : Gesäubert.
    HKLM\SOFTWARE\Altnet -> Adware.Altnet : Gesäubert.
    HKLM\SOFTWARE\Altnet\TopSearch -> Adware.Altnet : Gesäubert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink -> Adware.Altnet : Gesäubert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink.1 -> Adware.Altnet : Gesäubert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink\CLSID -> Adware.Altnet : Gesäubert.
    HKLM\SOFTWARE\Classes\TopSearch.TSLink\CurVer -> Adware.Altnet : Gesäubert.
    C:\WINDOWS\system32\AdCache -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_0_0_106800.htm -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_1_0_449200.gif -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_2_0_106800.htm -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_3_0_106800.htm -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_111600.htm -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_152400.htm -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_155300.htm -> Adware.Cydoor : Gesäubert.
    C:\WINDOWS\system32\AdCache\B_329_4_0_164100.htm -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0\Seqn_1068 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0\Seqn_4492 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0\Seqn_1068 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0\Seqn_1068 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1116 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1524 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1553 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_1641 -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Queue -> Adware.Cydoor : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Status -> Adware.Cydoor : Gesäubert.
    HKLM\SOFTWARE\Gator.com -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\GInternet -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\GInternet\Proxy -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_gi -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_trickle -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GCH\_ts -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\dyn\GUS -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Gator.com\Gator\stat -> Adware.Gator : Gesäubert.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Gesäubert.
    D:\Programme\WinFixer 2005\FixCore.dll -> Adware.SafeError : Gesäubert.
    C:\Program Files\SpySheriff -> Adware.SpySheriff : Gesäubert.
    C:\Program Files\SpySheriff\Uninstall.exe -> Adware.SpySheriff : Gesäubert.
    C:\Program Files\Zango\bak\zango.exe/Plugins\npclntax.dll -> Adware.Zango : Gesäubert.
    C:\Program Files\Zango\zangohook.dll -> Adware.Zango : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent -> Adware.Zango : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent.1 -> Adware.Zango : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent\CLSID -> Adware.Zango : Gesäubert.
    HKLM\SOFTWARE\Classes\ClientAX.RequiredComponent\CurVer -> Adware.Zango : Gesäubert.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zango -> Adware.Zango : Gesäubert.
    HKLM\SOFTWARE\zango -> Adware.Zango : Gesäubert.
    HKU\S-1-5-21-583907252-688789844-839522115-1003\Software\zango -> Adware.Zango : Gesäubert.
    C:\Documents and Settings\Philipp\Cookies\philipp@adtech[2].txt -> TrackingCookie.Adtech : Gesäubert.
    C:\Documents and Settings\Philipp\Cookies\philipp@doubleclick[1].txt -> TrackingCookie.Doubleclick : Gesäubert.
    C:\Documents and Settings\Philipp\Cookies\philipp@ivwbox[1].txt -> TrackingCookie.Ivwbox : Gesäubert.


    ::Berichtende

    hier ist der panda report:


    Ereignis Zustand Standort

    Potenziell unerwünschtes Tool:Application/MyWebSearch Nicht desinfiziert C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
    Potenziell unerwünschtes Tool:application/myglobalsearch Nicht desinfiziert c:\program files\MyGlobalSearch
    Adware:adware/zango Nicht desinfiziert c:\program files\Zango
    Adware:adware/spysheriff Nicht desinfiziert Windows-Registry
    Potenziell unerwünschtes Tool:application/myway Nicht desinfiziert hkey_classes_root\clsid\{014DA6C9-189F-421a-88CD-07CFE51CFF10}
    Adware:adware/gator Nicht desinfiziert Windows-Registry
    Adware:adware/savenow Nicht desinfiziert Windows-Registry
    Potenziell unerwünschtes Tool:application/altnet Nicht desinfiziert hkey_classes_root\clsid\{B7156514-A76C-4545-9D5B-A4E1D02C7AEC}
    Adware:adware/wupd Nicht desinfiziert Windows-Registry
    Spyware:Cookie/Adverserve Nicht desinfiziert C:\Documents and Settings\Philipp\Cookies\philipp@adverserve[1].txt
    Potenziell unerwünschtes Tool:Application/MyWebSearch Nicht desinfiziert C:\Program Files\MyGlobalSearch\bar\1.bin\M9PLUGIN.DLL
    Potenziell unerwünschtes Tool:Application/MyWebSearch Nicht desinfiziert C:\Program Files\MyGlobalSearch\bar\1.bin\NPMYGLSH.DLL

    hier ist der hijack reoprt -glaub ich zumindest, das ging irgendwie bisschen schnell...-

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 15:41:45, on 14.04.2007
    Platform: Windows XP (WinNT 5.01.2600)
    Boot mode: Normal

    Einmal editiert, zuletzt von EstherCH (9. Mai 2018 um 17:10)

    hier ist der bIF-Secure Black Light report:

    04/14/07 15:45:48 [Info]: BlackLight Engine 1.0.61 initialized
    04/14/07 15:45:48 [Info]: OS: 5.1 build 2600 ()
    04/14/07 15:45:48 [Note]: 7019 4
    04/14/07 15:45:48 [Note]: 7005 0
    04/14/07 15:46:07 [Note]: 7006 0
    04/14/07 15:46:07 [Note]: 7011 1736
    04/14/07 15:46:07 [Note]: 7026 0
    04/14/07 15:46:07 [Note]: 7026 0
    04/14/07 15:46:08 [Note]: FSRAW library version 1.7.1021
    04/14/07 15:47:44 [Note]: 7007 0

    ich hab gerade nochmal antivir drüberlaufen lassen und der zeigt mir nen virus an namens W95/Blumblebee.1738, is das der der auch bei dem einen von den geposteten virenscannern genannt wurde, den man ignorieren kann??is der schlimm??

    Zitat von pro_pk

    ich hab gerade nochmal antivir drüberlaufen lassen und der zeigt mir nen virus an namens W95/Blumblebee.1738, is das der der auch bei dem einen von den geposteten virenscannern genannt wurde, den man ignorieren kann??is der schlimm??

    ja ignorieren bitte (ist ja traurig das einzige was harmlos ist findet es, den Rest übersieht es - mußte ich einfach mal anmerken)

    Bitte keine Scans mehr machen, dein System ist schwer angeschlagen! Warte bitte auf bis eine Anleitung zur Reinigung von uns gepostet wird. Das erstellen einer solchen, dauert allerdings schon etwas.

    Viele Grüße
    WhiteKnight

    Viele Grüße
    WhiteKnight

    So nun kannst du loslegen, bitte in dieser Reihenfolge, poste die Reporte!


    Deaktiviere zuerst die Systemwiederherstellung:
    1. Klicken Sie auf Start, klicken Sie mit der rechten Maustaste auf Arbeitsplatz, und klicken Sie
    auf Eigenschaften.
    2. Klicken Sie auf die Registerkarte Systemwiederherstellung.
    3. Aktivieren Sie das Kontrollkästchen Systemwiederherstellung deaktivieren (oder das
    Kontrollkästchen Systemwiederherstellung auf allen Laufwerken deaktivieren), und klicken Sie
    auf OK.
    4. Klicken Sie auf Ja, wenn Sie gefragt werden, ob Sie die Systemwiederherstellung wirklich
    deaktivieren möchten.
    http://support.microsoft.com/default.aspx?scid=kb;de;310405


    öffne nun das HijackThis -- Button "scan" -- vor diese Malware-Einträge ein Häkchen setzen -- dann klicke auf: Button "Fix
    checked" – PC nun neustarten

    O2 - BHO: My Global Search Bar BHO - {37B85A21-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
    O3 - Toolbar: My Global Search Bar - {37B85A29-692B-4205-9CAD-2626E4993404} - C:\Program Files\MyGlobalSearch\bar\1.bin\MGSBAR.DLL
    O4 - HKLM\..\Run: [zango] "c:\program files\zango\zango.exe"
    O4 - HKLM\..\Run: [himem.exe] C:\WINDOWS\skcc32.exe -s
    O4 - HKLM\..\Run: [SoundMnEx32] C:\WINDOWS\skcc32.exe
    O4 - HKLM\..\Run: [ifcdiag] C:\WINDOWS\System32\ifcconf.exe
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker\RunApp.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker\RunApp.exe (file missing)
    O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - http://static.zangocash.com/cab/Zango/ie/bridge-c18.cab
    O20 - AppInit_DLLs: msjidpmo.dll confifc.dll ifcstat.dll
    O20 - Winlogon Notify: dbgmgr - ifcmgr32.dll (file missing)
    O20 - Winlogon Notify: msssmsda - C:\WINDOWS\System32\msssmsda.dll (file missing)

    dann

    Antivir nun beenden
    Download und ausführen:
    http://down.ne-e.eu/stration_remover.exe

    Stop all your Antivirus and Antispyware shields.
    Download and run Stration remover.
    When a window (with a text in Czech language) pops up, click on "ANO".
    When promted to reboot, answer Yes.
    Your computer should reboot, and briefly opens a black command window on your desktop.

    dann

    Counterspy
    http://research.sunbelt-software.com/download.aspx

    * Installation

    * Der PC muss neu gestartet werden

    * Nach dem Neustart/Installieren wird CounterSpy
    geupdatet
    Nicht Scannen. Boote nun in den abgesicherten MODUS (bei Neustart F8 drücken)
    http://www.tu-berlin.de/www/software/virus/savemode.shtml

    nun weiter im abgesicherten Modus
    Counterspy starten

    * Klicke: "Run a Spyware Scan Now"

    * nach dem Scan muss man sich entscheiden für:

    *Ignore
    *Remove --> Status: Deleted
    *Quarantaine

    wähle immer Remove und starte den PC neu (dann kopiere den Scanreport ab und hier posten)

    Hinweis
    Scanreport finden:
    klicke : View details

    diesen Report kann man abkopieren: [mit der linken Maus-Taste über den Text fahren -> rechte Maustaste -> kopieren -> hier im Thread -> rechte Maustaste -> einfügen]

    Nach Neustart in Normalmodus

    poste das log von Counterspy

    dann


    SDFix.zip entpacken
    http://virus-protect.org/artikel/tools/sdfix.html
    es erscheint folgende Meldung:

    "The SDFix Folder has been extracted to %systemdrive% - Please run from that location.
    (%systemdrive% = drive that contains the Windows directory - typically C:\SDFix )"

    unter C:\ findet man nun den SDFix-Ordner

    boote in den abgesicherten Modus (die Taste F8 drücken, während der Rechner neustartet)

    gehe in den Ordner C:\SDFix

    RunThis.bat doppelt klicken

    schreibe: Y

    folge allen Anweisungen, während gescannt wird - dann wird der Rechner neustarten
    kopiere mit der rechten Maustaste den Text ab, der erscheint und poste diesen hier.

    dann

    neuen Hijackthislog erstellen und posten.

    Viele Grüße
    WhiteKnight

    Viele Grüße
    WhiteKnight

    das mit dem counterspy klappt nich, hab das runtergeladen und wollte das installieren, aber der will immer noch so einen gameshadow installieren, da findet der den pfad aber nicht, wo dieser gameshadow verpackt runtergeladen ist???!!

    hat irgendwie geklappt mit dem counterspy hier is der report:

    Scan History Details
    Start Date: 14.04.2007 22:38:41
    End Date: 14.04.2007 23:04:08
    Total Time: 25 Min 27 Sec
    Detected security risks

    BearShare P2P Program more information...
    Details: BearShare is a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
    Status: Deleted

    Files detected
    C:\Documents and Settings\All Users\Start Menu\Programs\BearShare.lnk
    D:\Programme\BearShare\BSidle.dll
    D:\Programme\BearShare\RunMSC.dll
    D:\Programme\BearShare\Webstats.exe
    D:\Programme\BearShare\Webstats.ini

    Registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\BEARSHARE
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{558EC983-BEDB-9168-B2DE-31DBF0EE543E}
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE\shell
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE\shell\open
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE\shell\open\command
    HKEY_LOCAL_MACHINE\Software\Classes\GNUFILE\shell\open\command
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{905D0DF2-3A0A-4D94-853C-54A12A745905}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5F95E1AF-2620-4F15-BDF9-7FDCE4607E17}
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5F95E1AF-2620-4F15-BDF9-7FDCE4607E17}
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5F95E1AF-2620-4F15-BDF9-7FDCE4607E17}
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5F95E1AF-2620-4F15-BDF9-7FDCE4607E17}
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5F95E1AF-2620-4F15-BDF9-7FDCE4607E17}
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{5F95E1AF-2620-4F15-BDF9-7FDCE4607E17}
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP MANAGEMENT\ARPCACHE\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP MANAGEMENT\ARPCACHE\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP MANAGEMENT\ARPCACHE\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BEARSHARE
    HKEY_USERS\.DEFAULT\APPEVENTS\EVENTLABELS\BEARSHARECHATNOTIFYMSG
    HKEY_USERS\.DEFAULT\APPEVENTS\EVENTLABELS\BEARSHARECHATNOTIFYMSG
    HKEY_USERS\.DEFAULT\APPEVENTS\SCHEMES\APPS\BEARSHARE
    HKEY_USERS\.DEFAULT\APPEVENTS\SCHEMES\APPS\BEARSHARE
    HKEY_USERS\.DEFAULT\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg
    HKEY_USERS\.DEFAULT\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg
    HKEY_USERS\.DEFAULT\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg\.Current
    HKEY_USERS\.DEFAULT\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg\.Current
    HKEY_USERS\S-1-5-18\APPEVENTS\EVENTLABELS\BEARSHARECHATNOTIFYMSG
    HKEY_USERS\S-1-5-18\APPEVENTS\EVENTLABELS\BEARSHARECHATNOTIFYMSG
    HKEY_USERS\S-1-5-18\APPEVENTS\SCHEMES\APPS\BEARSHARE
    HKEY_USERS\S-1-5-18\APPEVENTS\SCHEMES\APPS\BEARSHARE
    HKEY_USERS\S-1-5-18\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg
    HKEY_USERS\S-1-5-18\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg
    HKEY_USERS\S-1-5-18\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg\.Current
    HKEY_USERS\S-1-5-18\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg\.Current
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\EVENTLABELS\BEARSHARECHATNOTIFYMSG
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\EVENTLABELS\BEARSHARECHATNOTIFYMSG
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\SCHEMES\APPS\BEARSHARE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\SCHEMES\APPS\BEARSHARE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg\.Current
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\APPEVENTS\SCHEMES\APPS\BEARSHARE\BearShareChatNotifyMsg\.Current


    Claria.GAIN.CommonElements Adware (General) more information...
    Details: Claria's GAIN network consists of several applications inlcuding Gator eWallet, GotSmiley, ScreenSeenes, WebSecureAlert, DashBar, Weatherscope, Date Manager and Precision Time.
    Status: Deleted

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}


    KaZaA P2P Program more information...
    Details: KaZaA is a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
    Status: Deleted

    Files detected
    D:\Programme\Kazaa\Help\mykazaa.css
    D:\Programme\Kazaa\kzscan.dll

    Registry entries detected
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\P2P
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\SKYPE
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Channels\WEBSEARCH
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\DontShow
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\DontShow
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\InstantMessaging
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\InstantMessaging
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\MyKazaaStates
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\MyKazaaStates
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\MyKazaaStates
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\MyKazaaStates
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Kazaa\ToolbarStates
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\LocalContent
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\LocalContent
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\LocalContent
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\LocalContent
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Promotions
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\ResultsFilter
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\ResultsFilter
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Search
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\Settings
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\UserDetails
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\UserDetails
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\UserDetails
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\KAZAA\UserDetails


    WhenU.Save Adware (General) more information...
    Details: WhenU.SaveNow is an adware application that displays pop-up advertising on the desktop in response to users' web browsing.
    Status: Deleted

    Files detected
    D:\Programme\BearShare\RunMSC.dll

    Registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{C285D18D-43A2-4AEF-83FB-BF280E660A97}\TypeLib
    HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\RunMSC.Loader.1
    HKEY_LOCAL_MACHINE\Software\Classes\RUNMSC.LOADER.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\RUNMSC.LOADER.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\RUNMSC.LOADER\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\RUNMSC.LOADER\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\RUNMSC.LOADER\CURVER
    HKEY_LOCAL_MACHINE\Software\Classes\RUNMSC.LOADER\CURVER


    180solutions.SearchAssistant Adware (General) more information...
    Details: 180search Assistant is an adware application that monitors users' search queries and web surfing in order to display targeted advertising.
    Status: Deleted

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\APPID\ACTIVEX.DLL
    HKEY_LOCAL_MACHINE\Software\Classes\APPID\ACTIVEX.DLL
    HKEY_LOCAL_MACHINE\Software\Classes\APPID\{D28CD14C-50BE-4CFA-951E-B37F25DA3472}
    HKEY_LOCAL_MACHINE\Software\Classes\APPID\{D28CD14C-50BE-4CFA-951E-B37F25DA3472}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\Control
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\ToolboxBitmap32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\ToolboxBitmap32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{99410CDE-6F16-42CE-9D49-3807F78F0287}\VersionIndependentProgID


    My Search Bar Potentially Unwanted Program more information...
    Details: My Search Bar and the variants "My Way Speedbar" and "My Way Search Assistant", are browser helper objects that allows you to search on multiple search engines.
    Status: Deleted

    Files detected
    c:\program files\myglobalsearch\bar\1.bin\MGSBAR.DLL

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}\InprocServer32


    Zango.SearchAssistant Adware (General) more information...
    Details: Zango Search Assistant opens new browser windows showing websites based on the previous websites you visit.
    Status: Deleted

    Files detected
    C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\Programs\Zango\Uninstall Zango Instructions.lnk
    C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\Programs\Zango\Zango Customer Support.url
    C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\Programs\Zango\Zango.com.url
    C:\PROGRAM FILES\Zango\zango_gdf.dat
    C:\PROGRAM FILES\Zango\zango_kyf.dat
    C:\PROGRAM FILES\Zango\zangoau.dat
    C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\ZANGO
    C:\PROGRAM FILES\ZANGO
    C:\PROGRAM FILES\ZANGO\BAK


    SpySheriff Rogue Security Program more information...
    Details: SpySheriff is a purported anti-spyware application to scan for and remove spyware from users' computers.
    Status: Deleted

    Registry entries detected
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\SNO2


    WindUpdates.MediaGateway Adware (General) more information...
    Details: WindUpdates.MediaGateway is an adware application that displays advertising on the desktop, usually pop-ups.
    Status: Deleted

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DD469A88-316C-441D-B712-783D9B9A6707}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER.1
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER.1
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\MEDIAGATEWAYX.INSTALLER\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{981BDA1D-C8AD-46FF-BE2C-FDDD859AC6F5}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\MODULEUSAGE\C:/WINDOWS/DOWNLOADED PROGRAM FILES/MEDIAGATEWAYX.DLL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\MODULEUSAGE\C:/WINDOWS/DOWNLOADED PROGRAM FILES/MEDIAGATEWAYX.DLL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\MODULEUSAGE\C:/WINDOWS/DOWNLOADED PROGRAM FILES/MEDIAGATEWAYX.DLL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS


    MyGlobalSearch.Toolbar Potentially Unwanted Program more information...
    Details: MyGlobalSearch.Toolbar is an IE plugin with its own Search Field.
    Status: Deleted

    Files detected
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\1.bin\M9FFXTBR.JAR
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\1.bin\M9FFXTBR.MANIFEST
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\1.bin\M9NTSTBR.JAR
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\1.bin\M9NTSTBR.MANIFEST
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\1.bin\M9PLUGIN.DLL
    c:\program files\myglobalsearch\bar\1.bin\MGSBAR.DLL
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\1.bin\NPMYGLSH.DLL
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Cache\0008E121
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Cache\0008E42F
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Cache\0008E577.bin
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Cache\0008E8D2.bin
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Cache\0008EA1A.bin
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Cache\files.ini
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\History\search
    C:\PROGRAM FILES\MYGLOBALSEARCH\bar\Settings\prevcfg.htm
    C:\PROGRAM FILES\MYGLOBALSEARCH
    C:\PROGRAM FILES\MYGLOBALSEARCH\BAR
    C:\PROGRAM FILES\MYGLOBALSEARCH\BAR\1.BIN
    C:\PROGRAM FILES\MYGLOBALSEARCH\BAR\CACHE
    C:\PROGRAM FILES\MYGLOBALSEARCH\BAR\HISTORY
    C:\PROGRAM FILES\MYGLOBALSEARCH\BAR\SETTINGS

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A29-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\Control
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{37B85A2B-692B-4205-9CAD-2626E4993404}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2A-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{37B85A2C-692B-4205-9CAD-2626E4993404}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN.1
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN.1
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.SETTINGSPLUGIN\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN.1
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN.1
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\MYGLOBALSEARCHBAR.TOOLBARPLUGIN\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{37B85A20-692B-4205-9CAD-2626E4993404}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP MANAGEMENT\ARPCACHE\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP MANAGEMENT\ARPCACHE\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP MANAGEMENT\ARPCACHE\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MY GLOBAL SEARCH UNINSTALL
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar
    HKEY_LOCAL_MACHINE\SOFTWARE\MYGLOBALSEARCH\bar


    Zango.Toolbar Toolbar more information...
    Details: Zango.Toolbar is an adware application that installs a browser helper object, (BHO), in the form of a toolbar.

    Files detected
    C:\Documents and Settings\All Users\Start Menu\Programs\Zango\Zango Customer Support.url


    PartyPoker Potentially Unwanted Program more information...
    Details: PartyPoker is an online gambling application that requires the user to download its software in order to play.
    Status: Deleted

    Registry entries detected
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER
    HKEY_USERS\S-1-5-21-583907252-688789844-839522115-1003\SOFTWARE\PARTYGAMING\PARTYPOKER


    Zango.CommonElements Adware (General) more information...
    Details: Zango.CommonElements is a collection of traces that are found in multiple adware programs from 180solutions / Zango.
    Status: Deleted

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX.1
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX.1
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\CLIENTAX.ZANGOCLIENTAX\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Control
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\ToolboxBitmap32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\ToolboxBitmap32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0AC49246-419B-4EE0-8917-8818DAAD6A4E}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Control
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\MiscStatus
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\MiscStatus\1
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\ToolboxBitmap32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\ToolboxBitmap32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\Version
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{51CF80DC-A309-4735-BB11-EF18BF4E3AD9}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\InprocServer32
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\ProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\Programmable
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{F31A5D11-BF0B-4A4E-90AF-274F2090AAA6}\VersionIndependentProgID
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{2B0ECEAC-F597-4858-A542-D966B49055B9}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{6C092742-10FE-4DB2-988D-FC71948DE70C}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{7FA8976F-D00C-4E98-8729-A66569233FB5}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{A16650A9-B065-40EC-BBD1-F8D370D17FB1}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{BDDDF1A5-51A9-4F51-B38D-4CD0AD831B31}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{E43DFAA6-8C16-4519-B022-8792408505A4}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\ProxyStubClsid32
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\INTERFACE\{F1F1E775-1B21-454D-8D38-7C16519969E5}\TypeLib
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX.1
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX.1
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX.1\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX\CLSID
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\LMGR180.WMDRMAX\CurVer
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\0
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\0\win32
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\FLAGS
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\HELPDIR
    HKEY_LOCAL_MACHINE\Software\Classes\TYPELIB\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA}\1.0\HELPDIR

    der report vom sdfix:

    SDFix: Version 1.78

    Run by Philipp - 15.04.2007 - 14:09:17,20

    Microsoft Windows XP [Version 5.1.2600]

    Running From: D:\PROGRA~1\sdfix\SDFix

    Safe Mode:
    Checking Services:


    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

Jetzt mitmachen!

Sie haben noch kein Benutzerkonto auf unserer Seite? Registrieren Sie sich kostenlos und nehmen Sie an unserer Community teil!

Benutzerkonto erstellen Anmelden