24Start
|
24Start.nl oder 24Start.com.24webDie Startzeite wird übernommen durch 24Start und es wird ein Dialer installiert 0,80 Euro pro MinuteEs ist lästig diesen Hijacker zu entfernen, da er regelmässig in Windows den Namen wechselt Aber mit Hijack This kann man diesen Hijacker entfernen R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/MS-Connect/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/MS-Connect/Portal/portal.html O4 HKLM\..\Run: [MS-Connect] C:\WINDOWS\System32\msite18.exe O4 HKLM\..\Run: [MS-Connect] C:\WINNT\System32\cdm.exe O4 HKLM\..\Run: [MS-Connect] C:\WINDOWS\System32\game.exe O4 HKLM\..\Run: [MS-RunKey] C:\WINDOWS\System32\arr.exe Startportal: R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/Startportal/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Startportal/Portal/portal.html O4 HKLM\..\Run: [Diskstart] C:\WINNT\system32\code.exe O4 HKLM\..\Run: [Diskstart] C:\WINDOWS\System32\cat.exe O4 HKLM\..\Run: [Diskstart] C:\WINDOWS\SYSTEM\HIT.EXE O4 HKLM\..\Run: [Diskstart] C:\WINDOWS\SYSTEM32\snt.exe QuickPage: R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/QuickPage/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/QuickPage/Portal/portal.html O4 HKLM\..\Run: [Quicktlme] C:\WINDOWS\System32\ru.exe O4 HKLM\..\Run: [Quicktlme] C:\WINDOWS\System\ru.exe O4 HKLM\..\Run: [Quicktlme] C:\WINDOWS\System32\cp.exe OnlineDirect: R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/Onlinedirect/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Onlinedirect/Portal/portal.html O4 HKLM\..\Run: [CLSID] C:\WINDOWS\System32\sed.exe O4 HKLM\..\Run: [CLSID] C:\WINDOWS\System32\msgplus.exe NowOnline: R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/NowOnline/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/NowOnline/Portal/portal.html O4 HKLM\..\Run: [CLSID] C:\WINDOWS\System32\com.exe FirstEnter: R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/FirstEnter/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/FirstEnter/Portal/portal.html O4 HKLM\..\Run: [CLSID] C:\WINDOWS\System32\dll.exe O4 HKLM\..\Run: [CLSID] C:\WINDOWS\System32\plugin.exe First2Enter R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/First2Enter/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/First2Enter/Portal/portal.html O4 HKLM\..\Run: [Open2Enter] C:\WINDOWS\System32\runme.exe O4 HKLM\..\Run: [Open2Enter] C:\WINDOWS\System32\runme2.exe O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\run_21.exe O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\srv.exe Plus18Point R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/Plus18Point/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Plus18Point/Portal/portal.html O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\srv.exe O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\srv2.exe O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\intl.exe O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\int1.exe MStartEnter R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/MStartEnter/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/MStartEnter/Portal/portal.html O4 HKLM\..\Run: [Classes] C:\WINDOWS\System32\mstar2.exe O4 HKLM\..\Run: [Classes] C:\WINDOWS\system32\mstart.exe MStart2Page R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/MStart2Page/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/MStart2Page/Portal/portal.html O4 HKLM\..\Run: [OpenMstart] C:\WINDOWS\System32\mcmgr32.exe O4 HKLM\..\Run: [OpenMstart] C:\WINDOWS\system32\mmgr32.exe EnterOne R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/EnterOne/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/EnterOne/Portal/portal.html O4 HKLM\..\Run: [NvCplD] C:\WINDOWS\System32\m2gr32.exe O4 HKLM\..\Run: [NvCplD] C:\WINDOWS\system32\ntcpl.exe O4 HKLM\..\Run: [NvCplD] C:\WINDOWS\system32\ntopengl.exe EnterOne R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/EnterOne/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/EnterOne/Portal/portal.html O4 HKLM\..\Run: [Updater] C:\WINDOWS\system32\adservernow.exe O4 HKLM\..\Run: [NvCplD] C:\WINDOWS\system32\ntcpl.exe EnterOne R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/EnterOne/Portal/portal.html R1 HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina file:///C:/Program%20Files/EnterOne/Portal/portal.html O4 HKLM\..\Run: [Updater] C:\WINNT\system32\adservernow.exe O4 HKLM\..\Run: [NvCplD] C:\WINNT\system32\ntopengl.exe PageOn1 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/PageOn1/Portal/portal.html O4 - HKLM\..\Run: [rCron] C:\WINDOWS\System32\rcron.exe O4 - HKLM\..\Run: [rCron] C:\WINDOWS\System32\dservice.exe Make125 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/Make125/Portal/portal.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Make125/Portal/portal.html O4 - HKLM\..\Run: [Updater] C:\WINDOWS\System\Adservernow.exe O4 - HKLM\..\Run: [sVideo2] C:\WINDOWS\System\Vxdrun6.exe Emakesv R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/eMakeSV/Portal/portal.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/ eMakeSV/Portal/portal.html O4 - HKLM\..\Run: [eMakeSV] C:\WINDOWS\SYSTEM\EMAKESV.EXE Emakes R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Program%20Files/eMakeSV/Portal/portal.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/eMakeSV/Portal/portal.html O4 - HKLM\..\Run: [eMakeSV] C:\WINDOWS\system32\emake2b.exe Switch - xcallswitch Regedit HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SWITCH Entferne unter Software(Add/Remove) Switch oder xcallswitch und entferne in c:\Program Files\Portal Counter-Box.de |