Trojan.Gen.2 (Symantec); OptimizerPro (fs) (not malicious) (Sunbelt)

 Plataforma:

Windows

 Classificao do risco total:
 infecção relatada:
 Impacto no sistema: :
 Exposição das informações:
Baixo
Medium
Alto
Crítico

  • Tipo de grayware:
    Adware

  • Destrutivo:
    Não

  • Criptografado:
     

  • In the Wild:
    Sim

  Visão geral

Löscht Dateien, so dass Programme und Anwendungen nicht ordnungsgemäß ausgeführt werden.

  Detalhes técnicos

Tipo de compactação: 6,978,376 bytes
Tipo de arquivo: EXE
Residente na memória: Sim
Data de recebimento das amostras iniciais: 25 junho 2015

Installation

Erstellt die folgenden Ordner:

  • %User Temp%\is-V0VTJ.tmp
  • %User Temp%\is-DBGRC.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup
  • %Program Files%\Optimizer Pro 3.51
  • %Start Menu%\Programs\Optimizer Pro v3.2
  • %User Temp%\OptimizerPro.madExcept
  • %User Profile%\Application Data\Optimizer Pro
  • %User Profile%\Optimizer Pro\Log
  • %User Profile%\Optimizer Pro\Undo
  • %User Profile%\Optimizer Pro\Backup

(Hinweis: %User Temp% ist der Ordner 'Temp' des aktuellen Benutzers, normalerweise C:\Dokumente und Einstellungen\{Benutzername}\Lokale Einstellungen\Temp unter Windows 2000, XP und Server 2003.. %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %Start Menu% ist der Ordner 'Startmenü' des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername}\Startmenü unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Startmenü unter Windows NT und C:\Windows\Startmenü oder C:\Dokumente und Einstellungen\{Benutzername}\Startmenü unter Windows 2000, XP und Server 2003.. %User Profile% ist der Ordner für Benutzerprofile des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername} unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername} unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername} unter Windows 2000, XP und Server 2003.)

Autostart-Technik

Fügt folgende Registrierungseinträge hinzu, um bei jedem Systemstart automatisch ausgeführt zu werden.

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Optimizer Pro = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"

Andere Systemänderungen

Löscht die folgenden Dateien:

  • %Desktop%\Optimizer Pro.pif
  • %Desktop%\Optimizer Pro.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.url
  • %User Temp%\OptimizerPro.madExcept\.
  • %User Temp%\OptimizerPro.madExcept\..

(Hinweis: %Desktop% ist der Ordner 'Desktop' für den aktuellen Benutzer, normalerweise C:\Windows\Profile\{Benutzername}\Desktop unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Desktop unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername}\Desktop unter Windows 2000, XP und Server 2003.. %Start Menu% ist der Ordner 'Startmenü' des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername}\Startmenü unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Startmenü unter Windows NT und C:\Windows\Startmenü oder C:\Dokumente und Einstellungen\{Benutzername}\Startmenü unter Windows 2000, XP und Server 2003.. %User Temp% ist der Ordner 'Temp' des aktuellen Benutzers, normalerweise C:\Dokumente und Einstellungen\{Benutzername}\Lokale Einstellungen\Temp unter Windows 2000, XP und Server 2003.)

Fügt die folgenden Registrierungsschlüssel hinzu:

HKEY_CURRENT_USER\Software\Optimizer Pro

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d

HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}

HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Fügt die folgenden Registrierungseinträge hinzu:

HKEY_CURRENT_USER\Software\Optimizer Pro
SessionID = "BAA1E922-49D5-4402-9120-712F8163333D"

HKEY_CURRENT_USER\Software\Optimizer Pro
cufValue = "CUF=0"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
340d3099 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
dbaf3ce3 = "/P////%%"

HKEY_CURRENT_USER\Software\Optimizer Pro
Language = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Setup Version = "5.5.3 (u)"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: App Path = "%Program Files%\Optimizer Pro 3.51"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
InstallLocation = "%Program Files%\Optimizer Pro 3.51"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Icon Group = "Optimizer Pro v3.2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: User = "Wilbert"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Selected Tasks = "runoptpro,runoptprodaily,desktopicon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Language = "en"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayName = "Optimizer Pro v3.2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayIcon = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
UninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
QuietUninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe /SILENT"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayVersion = "3.3.1.7"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Publisher = "PCUtilities Software Limited"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
URLInfoAbout = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
HelpLink = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
URLUpdateInfo = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
NoModify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
NoRepair = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
InstallDate = "20150605"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
MajorVersion = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
MinorVersion = "3"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
date = "1433555913"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
date = "1433555913"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
data.1 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
data.1 = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
usr.0 = "eAhQKpnikg01234567"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
usr.0 = "eAhQKpnikg01234567"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
usr.1 = "L9nTNM/XZTVNPRJLFH"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
usr.1 = "L9nTNM/XZTVNPRJLFH"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
version = "157f7"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
uuid = "4181197162"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
uuid = "4181197162"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
51d2f2ea = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
51d2f2ea = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
a2e3b941 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
a2e3b941 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
bbf88800 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
bbf88800 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
state = "0"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
a1dcff5b = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
a1dcff5b = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
340d3099 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
340d3099 = "/P////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
0e93c3f3 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
0e93c3f3 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
0c230bcb = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
0c230bcb = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
27ddcf6f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
27ddcf6f = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
414bc593 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
414bc593 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
f0bf0bde = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
f0bf0bde = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c99a5f5c = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c99a5f5c = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
72758a5d = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
72758a5d = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
e46c271e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
e46c271e = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
7f69fa1f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
7f69fa1f = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
3c09c42b = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
3c09c42b = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
7367429f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
7367429f = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
0dc3ee96 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
0dc3ee96 = "/P////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
d1abcdb6 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
d1abcdb6 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
38583bc3 = "Ml/2/CF/M//g/CZ////%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
38583bc3 = "Ml/2/CF/M//g/CZ////%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c24899a6 = "VP/g/CV/Vl/1/CF////%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c24899a6 = "VP/g/CV/Vl/1/CF////%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
f1f24e29 = "Vl/l/C/////%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
f1f24e29 = "Vl/l/C/////%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c5705860 = "Vx////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c5705860 = "Vx////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
a0743acc = "N/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
a0743acc = "N/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c6c5dd44 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c6c5dd44 = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
1520c6f1 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
1520c6f1 = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
2d71d5ab = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
2d71d5ab = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
8b9e4cbc = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
8b9e4cbc = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
fe94ce1e = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
fe94ce1e = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
587b5709 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
587b5709 = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
lrts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
lrts = "0"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
mode = "f"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
mode = "f"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svn = "Optimizer Pro Crash Monitor"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svi = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svt = "5571f31b"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
370856c7 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000
370856c7 = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
3efeb33e = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000
3efeb33e = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
a47da861 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000
a47da861 = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
2e22d94e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
2e22d94e = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
f6ad6fa6 = "VP/l/C//V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
f6ad6fa6 = "VP/l/C//V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
iiid = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
iiid = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000
370856c7 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000
3efeb33e = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000
a47da861 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
0c230bcb = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
0dc3ee96 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
0e93c3f3 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
1520c6f1 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
27ddcf6f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
2d71d5ab = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
2e22d94e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
340d3099 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
38583bc3 = "Ml/2/CF/M//g/CZ////%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
3c09c42b = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
414bc593 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
51d2f2ea = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
587b5709 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
72758a5d = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
7367429f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
7f69fa1f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
8b9e4cbc = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
a0743acc = "N/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
a1dcff5b = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
a2e3b941 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
bbf88800 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c24899a6 = "VP/g/CV/Vl/1/CF////%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c5705860 = "Vx////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c6c5dd44 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c99a5f5c = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
d1abcdb6 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
e46c271e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
f0bf0bde = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
f1f24e29 = "Vl/l/C/////%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
f6ad6fa6 = "VP/l/C//V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
fe94ce1e = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
data.1 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
date = "1433555913"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
iiid = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
lrts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
mode = "f"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
state = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
svi = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
svn = "Optimizer Pro Crash Monitor"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
svt = "5571f31b"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
usr.0 = "eAhQKpnikg01234567"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
usr.1 = "L9nTNM/XZTVNPRJLFH"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
uuid = "4181197162"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
version = "157f7"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
dbaf3ce3 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Windows
LoadAppInit_DLLs = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
a277a3f2 = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
dlpath = "%Program Files%\optimi~1.51\optpro~2.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svpath = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}
Cache = "1416756302525131992"

HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
n = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
n = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
InstallDate = "{random values}"

HKEY_CURRENT_USER\Software\Optimizer Pro
AppStart = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
DisplayName = "Optimizer Pro"

HKEY_CURRENT_USER\Software\Optimizer Pro
Version = "3.2"

HKEY_CURRENT_USER\Software\Optimizer Pro
Reminder = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
SpeedGuard = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
AppStart = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
LastVersionChecking = "{random values}"

HKEY_CURRENT_USER\Software\Optimizer Pro
LogDir = "%User Profile%\Optimizer Pro\Log"

HKEY_CURRENT_USER\Software\Optimizer Pro
UndoDir = "%User Profile%\Optimizer Pro\Undo"

HKEY_CURRENT_USER\Software\Optimizer Pro
ItemsToScan = "1111111111"

HKEY_CURRENT_USER\Software\Optimizer Pro
UseExceptionList = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
ShowRebootMessage = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_SmartScan = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_SmartExec = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_SmartMode = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_Enable = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_Time = "{random values}"

HKEY_CURRENT_USER\Software\Optimizer Pro
UpgradeID = "BZDV_PCSM_ML_PCUP_OPTIMIZERPRO_RED"

HKEY_CURRENT_USER\Software\Optimizer Pro
ProblemsFixed = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
ItemsCleaned = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
ResidualFilesCleaned = "0"

Löscht die folgenden Registrierungsschlüssel:

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptimizerPro_RASAPI32

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptimizerPro_RASMANCS

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptProStart_RASAPI32

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptProStart_RASMANCS

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
MenuOrder\Start Menu2\Programs\
Optimizer Pro

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030

Einschleusungsroutine

Schleust die folgenden Dateien ein:

  • %User Temp%\is-v0vtj.tmp\{malware file name}.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup\_shfoldr.dll
  • %User Temp%\is-DBGRC.tmp\OptProHelper.dll
  • %User Temp%\is-DBGRC.tmp\itdownload.dll
  • %User Temp%\is-DBGRC.tmp\OptProMon.dll
  • %Program Files%\Optimizer Pro 3.51\unins000.dat
  • %Program Files%\Optimizer Pro 3.51\is-FPUJI.tmp
  • %Program Files%\Optimizer Pro 3.51\is-I68VQ.tmp
  • %Program Files%\Optimizer Pro 3.51\is-PK0T9.tmp
  • %Program Files%\Optimizer Pro 3.51\is-GHKHR.tmp
  • %Program Files%\Optimizer Pro 3.51\is-DBAUT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EM7VD.tmp
  • %Program Files%\Optimizer Pro 3.51\is-C81U8.tmp
  • %Program Files%\Optimizer Pro 3.51\is-RDO5O.tmp
  • %Program Files%\Optimizer Pro 3.51\is-5ULDF.tmp
  • %Program Files%\Optimizer Pro 3.51\is-83LVB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-428GS.tmp
  • %Program Files%\Optimizer Pro 3.51\is-HMS1S.tmp
  • %Program Files%\Optimizer Pro 3.51\is-39NL3.tmp
  • %Program Files%\Optimizer Pro 3.51\is-Q9BCB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-TD6KT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EPI4U.tmp
  • %Program Files%\Optimizer Pro 3.51\is-B23FE.tmp
  • %Program Files%\Optimizer Pro 3.51\is-94P76.tmp
  • %Program Files%\Optimizer Pro 3.51\is-9L9E2.tmp
  • %Program Files%\Optimizer Pro 3.51\is-MFK1N.tmp
  • %Program Files%\Optimizer Pro 3.51\is-8JGQB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-V6F4J.tmp
  • %Desktop%\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.lnk
  • %Program Files%\Optimizer Pro 3.51\unins000.msg
  • %Program Files%\Optimizer Pro 3.51\OptProMon.dll

(Hinweis: %User Temp% ist der Ordner 'Temp' des aktuellen Benutzers, normalerweise C:\Dokumente und Einstellungen\{Benutzername}\Lokale Einstellungen\Temp unter Windows 2000, XP und Server 2003.. %Program Files%ist der Standardordner 'Programme', normalerweise C:\Programme.. %Desktop% ist der Ordner 'Desktop' für den aktuellen Benutzer, normalerweise C:\Windows\Profile\{Benutzername}\Desktop unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Desktop unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername}\Desktop unter Windows 2000, XP und Server 2003.. %Start Menu% ist der Ordner 'Startmenü' des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername}\Startmenü unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername}\Startmenü unter Windows NT und C:\Windows\Startmenü oder C:\Dokumente und Einstellungen\{Benutzername}\Startmenü unter Windows 2000, XP und Server 2003.)

  Solução

Mecanismo de varredura mínima: 9.750

Step 1

Für Windows ME und XP Benutzer: Stellen Sie vor einer Suche sicher, dass die Systemwiederherstellung deaktiviert ist, damit der gesamte Computer durchsucht werden kann.

Step 2

Im abgesicherten Modus neu starten

[ Saber mais ]

Step 3

Diesen Registrierungsschlüssel löschen

[ Saber mais ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

  • In HKEY_CURRENT_USER\Software
    • Optimizer Pro
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3
    • eae10f9d
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • Optimizer Pro_is1
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
    • _a277a3f2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
    • _a277a3f2
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • eae10f9d
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • eae10f9d
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • 00000000
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • 00000000
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • 00000000
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • eae10f9d
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • {6791A2F3-FC80-475C-A002-C014AF797E9C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • {1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • {3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Step 4

Diesen Registrierungswert löschen

[ Saber mais ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • Optimizer Pro = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • SessionID = "BAA1E922-49D5-4402-9120-712F8163333D"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • cufValue = "CUF=0"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
    • 340d3099 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
    • dbaf3ce3 = "/P////%%"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • Language = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Setup Version = "5.5.3 (u)"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: App Path = "%Program Files%\Optimizer Pro 3.51"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • InstallLocation = "%Program Files%\Optimizer Pro 3.51"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Icon Group = "Optimizer Pro v3.2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: User = "Wilbert"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Selected Tasks = "runoptpro,runoptprodaily,desktopicon"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Language = "en"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • DisplayName = "Optimizer Pro v3.2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • DisplayIcon = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • UninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • QuietUninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe /SILENT"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • DisplayVersion = "3.3.1.7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Publisher = "PCUtilities Software Limited"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • URLInfoAbout = "http://www.{BLOCKED}itiespro.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • HelpLink = "http://www.{BLOCKED}itiespro.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • URLUpdateInfo = "http://www.{BLOCKED}itiespro.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • NoModify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • NoRepair = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • InstallDate = "20150605"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • MajorVersion = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • MinorVersion = "3"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • date = "1433555913"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • date = "1433555913"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.1 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.1 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.0 = "eAhQKpnikg01234567"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.0 = "eAhQKpnikg01234567"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.1 = "L9nTNM/XZTVNPRJLFH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.1 = "L9nTNM/XZTVNPRJLFH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • version = "157f7"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • uuid = "4181197162"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • uuid = "4181197162"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 51d2f2ea = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 51d2f2ea = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a2e3b941 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a2e3b941 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • bbf88800 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • bbf88800 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • state = "0"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a1dcff5b = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a1dcff5b = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 340d3099 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 340d3099 = "/P////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0e93c3f3 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0e93c3f3 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0c230bcb = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0c230bcb = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 27ddcf6f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 27ddcf6f = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 414bc593 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 414bc593 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f0bf0bde = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f0bf0bde = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c99a5f5c = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c99a5f5c = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 72758a5d = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 72758a5d = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • e46c271e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • e46c271e = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7f69fa1f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7f69fa1f = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 3c09c42b = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 3c09c42b = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7367429f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7367429f = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0dc3ee96 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0dc3ee96 = "/P////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • d1abcdb6 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • d1abcdb6 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 38583bc3 = "Ml/2/CF/M//g/CZ////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 38583bc3 = "Ml/2/CF/M//g/CZ////%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c24899a6 = "VP/g/CV/Vl/1/CF////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c24899a6 = "VP/g/CV/Vl/1/CF////%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f1f24e29 = "Vl/l/C/////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f1f24e29 = "Vl/l/C/////%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c5705860 = "Vx////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c5705860 = "Vx////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a0743acc = "N/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a0743acc = "N/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c6c5dd44 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c6c5dd44 = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 1520c6f1 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 1520c6f1 = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2d71d5ab = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2d71d5ab = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 8b9e4cbc = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 8b9e4cbc = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • fe94ce1e = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • fe94ce1e = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 587b5709 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 587b5709 = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • lrts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • lrts = "0"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • mode = "f"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • mode = "f"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svn = "Optimizer Pro Crash Monitor"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svi = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svt = "5571f31b"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 370856c7 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 370856c7 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 3efeb33e = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 3efeb33e = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • a47da861 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • a47da861 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2e22d94e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2e22d94e = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f6ad6fa6 = "VP/l/C//V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f6ad6fa6 = "VP/l/C//V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • iiid = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • iiid = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\00000000
    • 370856c7 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\00000000
    • 3efeb33e = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\00000000
    • a47da861 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 0c230bcb = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 0dc3ee96 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 0e93c3f3 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 1520c6f1 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 27ddcf6f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 2d71d5ab = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 2e22d94e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 340d3099 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 38583bc3 = "Ml/2/CF/M//g/CZ////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 3c09c42b = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 414bc593 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 51d2f2ea = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 587b5709 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 72758a5d = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 7367429f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 7f69fa1f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 8b9e4cbc = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • a0743acc = "N/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • a1dcff5b = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • a2e3b941 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • bbf88800 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c24899a6 = "VP/g/CV/Vl/1/CF////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c5705860 = "Vx////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c6c5dd44 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c99a5f5c = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • d1abcdb6 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • e46c271e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • f0bf0bde = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • f1f24e29 = "Vl/l/C/////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • f6ad6fa6 = "VP/l/C//V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • fe94ce1e = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • data.1 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • date = "1433555913"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • iiid = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • lrts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • mode = "f"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • state = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • svi = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • svn = "Optimizer Pro Crash Monitor"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • svt = "5571f31b"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • usr.0 = "eAhQKpnikg01234567"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • usr.1 = "L9nTNM/XZTVNPRJLFH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • uuid = "4181197162"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • version = "157f7"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • dbaf3ce3 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
    • LoadAppInit_DLLs = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    • a277a3f2 = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • dlpath = "%Program Files%\optimi~1.51\optpro~2.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svpath = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}
    • Cache = "1416756302525131992"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    • n = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
    • n = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • InstallDate = "{random values}"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • AppStart = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • DisplayName = "Optimizer Pro"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • Version = "3.2"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • Reminder = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • SpeedGuard = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • AppStart = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • LastVersionChecking = "{random values}"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • LogDir = "%User Profile%\Optimizer Pro\Log"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • UndoDir = "%User Profile%\Optimizer Pro\Undo"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ItemsToScan = "1111111111"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • UseExceptionList = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ShowRebootMessage = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_SmartScan = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_SmartExec = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_SmartMode = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_Enable = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_Time = "{random values}"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • UpgradeID = "BZDV_PCSM_ML_PCUP_OPTIMIZERPRO_RED"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ProblemsFixed = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ItemsCleaned = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ResidualFilesCleaned = "0"

Step 5

Diese Dateien suchen und löschen

[ Saber mais ]
Möglicherweise sind einige Komponentendateien verborgen. Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter "Weitere erweiterte Optionen", um alle verborgenen Dateien und Ordner in den Suchergebnissen zu berücksichtigen.
  • %User Temp%\is-v0vtj.tmp\{malware file name}.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup\_shfoldr.dll
  • %User Temp%\is-DBGRC.tmp\OptProHelper.dll
  • %User Temp%\is-DBGRC.tmp\itdownload.dll
  • %User Temp%\is-DBGRC.tmp\OptProMon.dll
  • %Program Files%\Optimizer Pro 3.51\unins000.dat
  • %Program Files%\Optimizer Pro 3.51\is-FPUJI.tmp
  • %Program Files%\Optimizer Pro 3.51\is-I68VQ.tmp
  • %Program Files%\Optimizer Pro 3.51\is-PK0T9.tmp
  • %Program Files%\Optimizer Pro 3.51\is-GHKHR.tmp
  • %Program Files%\Optimizer Pro 3.51\is-DBAUT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EM7VD.tmp
  • %Program Files%\Optimizer Pro 3.51\is-C81U8.tmp
  • %Program Files%\Optimizer Pro 3.51\is-RDO5O.tmp
  • %Program Files%\Optimizer Pro 3.51\is-5ULDF.tmp
  • %Program Files%\Optimizer Pro 3.51\is-83LVB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-428GS.tmp
  • %Program Files%\Optimizer Pro 3.51\is-HMS1S.tmp
  • %Program Files%\Optimizer Pro 3.51\is-39NL3.tmp
  • %Program Files%\Optimizer Pro 3.51\is-Q9BCB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-TD6KT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EPI4U.tmp
  • %Program Files%\Optimizer Pro 3.51\is-B23FE.tmp
  • %Program Files%\Optimizer Pro 3.51\is-94P76.tmp
  • %Program Files%\Optimizer Pro 3.51\is-9L9E2.tmp
  • %Program Files%\Optimizer Pro 3.51\is-MFK1N.tmp
  • %Program Files%\Optimizer Pro 3.51\is-8JGQB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-V6F4J.tmp
  • %Desktop%\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.lnk
  • %Program Files%\Optimizer Pro 3.51\unins000.msg
  • %Program Files%\Optimizer Pro 3.51\OptProMon.dll

Step 6

Diese Ordner suchen und löschen

[ Saber mais ]
Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter Weitere erweiterte Optionen, um alle verborgenen Ordner in den Suchergebnissen zu berücksichtigen.
  • %User Temp%\is-V0VTJ.tmp
  • %User Temp%\is-DBGRC.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup
  • %Program Files%\Optimizer Pro 3.51
  • %Start Menu%\Programs\Optimizer Pro v3.2
  • %User Temp%\OptimizerPro.madExcept
  • %User Profile%\Application Data\Optimizer Pro
  • %User Profile%\Optimizer Pro\Log
  • %User Profile%\Optimizer Pro\Undo
  • %User Profile%\Optimizer Pro\Backup

Step 7

Führen Sie den Neustart im normalen Modus durch, und durchsuchen Sie Ihren Computer mit Ihrem Trend Micro Produkt nach Dateien, die als ADW_PCOptimizerPro entdeckt werden. Falls die entdeckten Dateien bereits von Ihrem Trend Micro Produkt gesäubert, gelöscht oder in Quarantäne verschoben wurden, sind keine weiteren Schritte erforderlich. Dateien in Quarantäne können einfach gelöscht werden. Auf dieser Knowledge-Base-Seite finden Sie weitere Informationen.


Participe da nossa pesquisa!