Friday
2009-01-10, 20:00
The following instructions have been created to help you to get rid of "MainPean" manually.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.
If this guide was helpful to you, please consider donating towards this site (http://www.safer-networking.org/index.php?page=donate).
Threat Details:
Categories:
dialer
Description:
No real privacy policy, EULA is in german. Links to this dialer get sent as unrequested spam. Owner threatened to sue for molestation after asking him by mail to stop spam.
Supposed Functionality:
Dialer for Germany, Austria, Switzerland, UK, Netherlands, Spain, Australia, Sweden, Norway, Danmark, Belgium, Italy, Ireland, Greece, Hongkong, Japan
Links (be careful!):
Website: http://www.mainpean.de/
Product: http://help.stardialer.de/
Privacy: http://www.mainpean.de/content/agb.php
Removal Instructions:
Desktop:
Please remove the following files from your desktop.
To check where they are pointing to, right-click them and choose "Properties" from the context menu appearing.
Shortcuts named "SMS-Stadt sst-11463.lnk" and pointing to "installer[sst-11463,de].exe -l".
Shortcuts named "Koch Ideen kie-10009.lnk" and pointing to "KochIdeen[kie-10009,de].exe?-l".
Shortcuts named "Gedichte.it ggg-10003.lnk" and pointing to "<$WINDIR>\gedichte[ggg-10003,de].exe?-l".
Shortcuts named "gedicht gdi-10046.lnk" and pointing to "<$DESKTOP>\gedichte[gdi-10046,de].exe -l".
Shortcuts named "schulstadt sla-10367.lnk" and pointing to "<$DESKTOP>\schulstadt[sla-10367,de].exe -l".
Shortcuts named "SexSmilies sexsmilies.lnk" and pointing to "<$DESKTOP>\SexSmilies[sexsmilies,de].exe -l".
Shortcuts named "Hochzeit.ag hcg-10021.lnk" and pointing to "<$DESKTOP>\hochzeit[hcg-10021,de,lay1].exe -l".
Shortcuts named "Smilie-Fabrik smilie-fabrik.lnk" and pointing to "<$DESKTOP>\Smilie-Fabrik[smilie-fabrik,de].exe -l".
Shortcuts named "Routenplaner.AG rlg-10086.lnk" and pointing to "RoutenplanerAG[rlg-10086,de,].exe -l".
Shortcuts named "lebenslauf.de lba-10001.lnk" and pointing to "lebenslauf[lba-10001,de].exe -l".
Shortcuts named "P2P p2p-10113.lnk" and pointing to "azureus[p2p-10113,de].exe -l".
Shortcuts named "Hackercd-Online hcd-11563.lnk" and pointing to "firewall[hcd-11563,de].exe -l".
Shortcuts named "shocker sor-10040.lnk" and pointing to "SHOCKER[sor-10040,de].exe -l".
Shortcuts named "CleverCrackers ccs-10007.lnk" and pointing to "<$DESKTOP>\CleverCrackers[ccs-10007,en,ccs-10007.exe -l".
Shortcuts named "feier fir-10002.lnk" and pointing to "feier[fir-10002,de].exe -l".
Shortcuts named "MonsterMMS monstermms.lnk" and pointing to "5a8ed794d89583d08.exe -l".
Shortcuts named "PornstarNet por-10171.lnk" and pointing to "PornstarNet[por-10171,de].exe -l".
Shortcuts named "Witzekontor.de - Einmal richtig ablachen witzekontor-de.lnk" and pointing to "Witze[witzekontor-de,de].exe -l".
Shortcuts named "gameXXL.de gamexxl-de.lnk" and pointing to "gameXXL[gamexxl-de,de].exe -l".
Shortcuts named "Tattoo Mania toa-10044.lnk" and pointing to "tattoo[toa-10044,de].exe -l".
Shortcuts named "Hentai.tv hv-10248.lnk" and pointing to "hentai[hv-10248,de].exe -l".
Shortcuts named "DIAET.AG deg-10019.lnk" and pointing to "abnehmen[deg-10019,de].exe -l".
Shortcuts named "adultporn.tv apv-10036.lnk" and pointing to "adultporn-tv[apv-10036,de].exe -l".
Shortcuts named "alternativ-heilung.com ahm-10001.lnk" and pointing to "Alternativheilung[ahm-10001,de].exe -l".
Shortcuts named "Boysline bl-10551.lnk" and pointing to "boysline[bl-10551,de].exe -l".
Shortcuts named "castingtipps cns-10066.lnk" and pointing to "castingtipps[cns-10066,de].exe -l".
Shortcuts named "CelebritySkin cbs-10105.lnk" and pointing to "CelebritySkin[cbs-10105,de].exe -l".
Shortcuts named "cheatspur chp-10088.lnk" and pointing to "cheats[chp-10088,de].exe -l".
Shortcuts named "Cheats24.org csg-10096.lnk" and pointing to "Cheats[csg-10096,de].exe -l".
Shortcuts named "FUNKINGS fun-10213.lnk" and pointing to "funkings[fun-10213,de].exe -l".
Shortcuts named "Funnyworld fyd-10244.lnk" and pointing to "funnyworld[fyd-10244,de,2-0].exe -l".
Shortcuts named "gifsworld gwd-10728.lnk" and pointing to "gifsworld[gwd-10728,de].exe -l".
Shortcuts named "IntexusDial ger-10460.lnk" and pointing to "games[ger-10460,de].exe -l".
Shortcuts named "IntexusDial gamespider.lnk" and pointing to "game-spider[gamespider,de].exe -l".
Shortcuts named "IntexusDial g4u-10051.lnk" and pointing to "grusskarte4u[g4u-10051,de].exe -l".
Shortcuts named "IntexusDial gag-10082.lnk" and pointing to "grusskarten[gag-10082,de].exe -l".
Shortcuts named "IntexusDial bre-10001.lnk" and pointing to "HaiAlarm[bre-10001,de].exe -l".
Shortcuts named "IntexusDial iln-10005.lnk" and pointing to "Individuell-Abnehmen[iln-10005,de,01].exe -l".
Shortcuts named "IntexusDial jgb-10083.lnk" and pointing to "jungeboys[jgb-10083,de].exe -l".
Shortcuts named "IntexusDial kng-10025.lnk" and pointing to "Kasino[kng-10025,de].exe -l".
Shortcuts named "IntexusDial kan-10777.lnk" and pointing to "kontaktanzeigen[kan-10777,de].exe -l".
Shortcuts named "IntexusDial lbi-10027.lnk" and pointing to "Liebesbriefe[lbi-10027,de].exe -l".
Shortcuts named "IntexusDial lam-11437.lnk" and pointing to "logoalarm[lam-11437,de].exe -l".
Shortcuts named "IntexusDial pcm-10100.lnk" and pointing to "Probendatenbank[pcm-10100,de].exe -l".
Shortcuts named "IntexusDial syc-10030.lnk" and pointing to "Smiley[syc-10030,de].exe -l".
Shortcuts named "IntexusDial sud-10135.lnk" and pointing to "SMS-Fun[sud-10135,de].exe -l".
Shortcuts named "IntexusDial sst-11022.lnk" and pointing to "smsstadt[sst-11022,de].exe -l".
Shortcuts named "IntexusDial szn-10020.lnk" and pointing to "sternzeichen[szn-10020,de].exe -l".
Shortcuts named "IntexusDial tod-10013.lnk" and pointing to "tattoos[tod-10013,de].exe -l".
Shortcuts named "IntexusDial zre-10084.lnk" and pointing to "zaubertricks[zre-10084,de,l-1].exe -l".
Shortcuts named "IntexusDial waa-10011.lnk" and pointing to "Witzealarm[waa-10011,de].exe -l".
Shortcuts named "IntexusDial ssp-10106.lnk" and pointing to "SMS-SPIDER[ssp-10106,de].exe -l".
Shortcuts named "IntexusDial tgn-10033.lnk" and pointing to "Tangafun[tgn-10033,de].exe -l".
Shortcuts named "IntexusDial ssf-10476.lnk" and pointing to "StarsNackt[ssf-10476,de].exe -l".
Shortcuts named "IntexusDial swr-10136.lnk" and pointing to "smsmanager[swr-10136,de].exe -l".
Shortcuts named "IntexusDial oha-10269.lnk" and pointing to "Onlinehacker[oha-10269,de].exe -l".
Shortcuts named "IntexusDial p2p-10280.lnk" and pointing to "p2p[p2p-10280,de].exe -l".
Shortcuts named "Priggle priggle.lnk" and pointing to "Rezepte.exe*".
Shortcuts named "Flirty fiy-10034.lnk" and pointing to "flirty[fiy-10034,de].exe -l".
Shortcuts named "geniale-rezepte grt-10006.lnk" and pointing to "geniale-rezepte[grt-10006,de].exe -l".
Shortcuts named "geniale-rezepte grt-10016.lnk" and pointing to "geniale-rezepte[grt-10016,de].exe -l".
Shortcuts named "geschenkidee gsi-10016.lnk" and pointing to "geschenkidee[gsi-10016,de].exe -l".
Shortcuts named "gifsworld gwd-10461.lnk" and pointing to "gifsworld[gwd-10461,de].exe -l".
Shortcuts named "Hausaufgaben Direktzugang hausaufgaben.lnk" and pointing to "hausaufgaben[hausaufgaben,de,SIDx_x2_hausaufgaben.com_pD9E3A279.dip.t-dialin.net_217.227.162.121].exe -l".
Shortcuts named "Brautberater.de bbr-10015.lnk" and pointing to "hochzeit[bbr-10015,de].exe -l".
Shortcuts named "Astrofieber.de aie-10056.lnk" and pointing to "Horoskop_erstellen[aie-10056,de].exe -l".
Shortcuts named "Humor.ag hug-10053.lnk" and pointing to "humor[hug-10053,de,9-0].exe -l".
Shortcuts named "loesungsbuch.de lbu-10001.lnk" and pointing to "loesungsbuch[lbu-10001,de,2514].exe -l".
Shortcuts named "Vornamen-Fundus vnf-10033.lnk" and pointing to "vornamen[vnf-10033,de].exe -l".
Shortcuts named "Humor24.net h2t-10062.lnk" and pointing to "video2[h2t-10062,de,10-0].exe -l".
Shortcuts named "Tattootussis.de tue-10004.lnk" and pointing to "tattoo-sex[tue-10004,de].exe -l".
Shortcuts named "Spicken.info spi-10016.lnk" and pointing to "spicker[spi-10016,de].exe -l".
Shortcuts named "songtextzone xzo-10012.lnk" and pointing to "songtextzone[xzo-10012,de].exe -l".
Shortcuts named "Spass24 sp4-10279.lnk" and pointing to "spass24[sp4-10279,de].exe -l".
Shortcuts named "MobileTunes met-10308.lnk" and pointing to "SMS-Tool[met-10308,de].exe -l".
Shortcuts named "schulstadt sla-10112.lnk" and pointing to "schulstadt[sla-10112,de].exe -l".
Shortcuts named "Routenplaner.AG rlg-10234.lnk" and pointing to "RoutenplanerAG[rlg-10234,de,].exe -l".
Shortcuts named "Routenplaner Profi rai-10062.lnk" and pointing to "routenplaner[rai-10062,de].exe -l".
Shortcuts named "MobileGuru mlu-10576.lnk" and pointing to "MobileGuru[mlu-10576,de].exe -l".
Shortcuts named "Priggle priggle.lnk" and pointing to "Rezepte.exe -l".
Shortcuts named "ich-koche ike-10025.lnk" and pointing to "rezepte[ike-10025,de].exe -l".
Shortcuts named "modeberater mbr-10038.lnk" and pointing to "modeberater[mbr-10038,de].exe -l".
Shortcuts named "MegaGIF maf-10416.lnk" and pointing to "megagif[maf-10416,de].exe -l".
Shortcuts named "Kochrezepte.cc kzc-10061.lnk" and pointing to "Kochrezepte[kzc-10061,de].exe -l".
Shortcuts named "Monster Vorlagen mvn-10023.lnk" and pointing to "homepagevorlagen[mvn-10023,de].exe -l".
Shortcuts named "Bilderkiste.de bilderkiste-de.lnk" and pointing to "Bilderkiste_Fotos[bilderkiste-de,de].exe -l".
Shortcuts named "cheats.fm tc4-10049.lnk" and pointing to "cheats[tc4-10049,de].exe -l".
Shortcuts named "GifProfi gpi-10292.lnk" and pointing to "GifProfi[gpi-10292,de].exe -l".
Shortcuts named "gif-seite gse-10097.lnk" and pointing to "Gif-Seite[gse-10097,de].exe -l".
Shortcuts named "hochzeits-feier htr-10014.lnk" and pointing to "Hochzeit[htr-10014,de].exe -l".
Shortcuts named "MMSjack mjk-10176.lnk" and pointing to "MMSjack[mjk-10176,de].exe -l".
Shortcuts named "MP3-Legal mll-10091.lnk" and pointing to "MP3-Legal[mll-10091,de].exe -l".
Shortcuts named "Quizrunden.de qne-10214.lnk" and pointing to "Quiz_starten[qne-10214,de].exe -l".
Shortcuts named "loesungsbuch.com loesungsbuch-com.lnk" and pointing to "referate[loesungsbuch-com,de].exe -l".
Shortcuts named "SMS-Stadt sst-11662.lnk" and pointing to "SMS-Stadt[sst-11662,de].exe -l".
Shortcuts named "testedich teh-10066.lnk" and pointing to "test[teh-10066,de,start4].exe -l".
Shortcuts named "Clipartland cld-10179.lnk" and pointing to "Clipartland[cld-10179,de].exe -l".
Shortcuts named "Trilian-de trilian-de.lnk" and pointing to "Trilian.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0157.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0159.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01511.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01520.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01566.exe -l".
Shortcuts named "Hobby-Hacker hcw-10112.lnk" and pointing to "virenschutz.exe -l".
Shortcuts named "Hacker Spider hgr-13000.lnk" and pointing to "Hacker Spider.exe -l".
Shortcuts named "Hacker Spider hgr-10005.lnk" and pointing to "free-connector.exe -l".
Shortcuts named "Hacker Spider hgr-10331.lnk" and pointing to "Sicherheit.exe".
Shortcuts named "SMS-Stadt sst-12804.lnk" and pointing to "klingeltoene[sst-12804,de].exe -l".
Shortcuts named "SMS-Stadt sst-11958.lnk" and pointing to "smsstadt[sst-11958,de].exe -l".
Shortcuts named "SMS-Stadt sst-12754.lnk" and pointing to "SMS-Stadt[sst-12754,de].exe -l".
Shortcuts named "SMS-Stadt sst-12560.lnk" and pointing to "smsstadt[sst-12560,de].exe -l".
Shortcuts named "eCards eas-10094.lnk" and pointing to "eCards[eas-10094,de].exe -l".
Shortcuts named "Aersche24.de ahe-10013.lnk" and pointing to "Aersche24[ahe-10013,de].exe -l".
Shortcuts named "Animedesktop adp-10083.lnk" and pointing to "AnimeDesktop[adp-10083,de].exe -l".
Shortcuts named "Referate ree-10064.lnk" and pointing to "ausreden[ree-10064,de].exe -l".
Shortcuts named "Animierte-Gifs.de animierte-gifs.lnk" and pointing to "animiertegifs[animierte-gifs,de].exe -l".
Shortcuts named "Hackercd-Online hcd-10240.lnk" and pointing to "security[hcd-10240,de].exe*".
Shortcuts named "P2P p2p-10253.lnk" and pointing to "p2p[p2p-10253,de].exe*".
Shortcuts named "testedich teh-10067.lnk" and pointing to "test[teh-10067,de,start4].exe*".
Shortcuts named "Linkrakete linkrakete.lnk" and pointing to "FREE-DOWNLOAD[linkrakete,de].exe*".
Shortcuts named "iqtest iqtest.lnk" and pointing to "*.exe*".
Shortcuts named "sendman D-1000.lnk" and pointing to "79.exe".
Shortcuts named "sendman D-1000.lnk" and pointing to "0157.exe".
Shortcuts named "sendman D-1000.lnk" and pointing to "0159.exe".
Shortcuts named "sendman D-1000.lnk" and pointing to "01505.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01511.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01520.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0160.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01566.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0171.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "664.EXE -l".
Shortcuts named "piratos p-11722.lnk" and pointing to "*.exe".
Shortcuts named "gedichte ged-10006.lnk" and pointing to "<$DESKTOP>".
Shortcuts named "vornamen vnn-10019.lnk" and pointing to "vornamen[vnn-10019,de].exe -l".
Shortcuts named "SMS-Stadt sst-11184.lnk" and pointing to "smsstadt[sst-11184,de].exe".
Shortcuts named "testedich testedich.lnk" and pointing to "test.exe".
Shortcuts named "Erotic-Master erotic-master.lnk" and pointing to "Erotic-Master[erotic-master,de].exe".
Shortcuts named "fun-movies fmv-10286.lnk" and pointing to "fun24[fmv-10286,de].exe".
Shortcuts named "Funnyserver fs-10757.lnk" and pointing to "FunFunFun[fs-10757,de].exe".
Shortcuts named "gifsworld gifsworld.lnk" and pointing to "gifsworld[gifsworld,de].exe".
Shortcuts named "gifsworld gwd-10005.lnk" and pointing to "gifsworld[gwd-10005,de].exe".
Shortcuts named "od-stnd224.lnk" and pointing to "od-stnd224.exe".
Shortcuts named "testedich teh-10067.lnk" and pointing to "test[teh-10067,de,start4].exe".
Shortcuts named "DIAET.AG deg-10129.lnk" and pointing to "abnehmen[deg-10129,de].exe".
Shortcuts named "bewerbe-dich bbh-10061.lnk" and pointing to "Bewerbung[bbh-10061,de].exe".
Shortcuts named "Liebesbriefe lbi-10016.lnk" and pointing to "BRIEFE[lbi-10016,de].exe".
Shortcuts named "cocktail-partys ccp-10097.lnk" and pointing to "cocktails[ccp-10097,de].exe".
Shortcuts named "Geburtstag grg-10097.lnk" and pointing to "geburtstag[grg-10097,de].exe".
Shortcuts named "gifsworld gwd-10927.lnk" and pointing to "gifsworld[gwd-10927,de].exe".
Shortcuts named "Hackerz hz-10046.lnk" and pointing to "Hackerz[hz-10046,de].exe".
Shortcuts named "Hausaufgaben hun-10222.lnk" and pointing to "hausaufgaben[hun-10222,de].exe".
Shortcuts named "Astrofieber.de aie-10070.lnk" and pointing to "Horoskop_erstellen[aie-10070,de].exe".
Shortcuts named "Liebesbriefe lbi-10023.lnk" and pointing to "Liebesbriefe[lbi-10023,de,start].exe".
Shortcuts named "iqtest itt-10528.lnk" and pointing to "IQTest[itt-10528,de].exe".
Shortcuts named "SMS-Stadt sst-11958.lnk" and pointing to "liebe[sst-11958,de].exe".
Shortcuts named "Gamer.AG geg-10001.lnk" and pointing to "spiele_runterladen[geg-10001,de].exe".
Shortcuts named "testedich teh-10116.lnk" and pointing to "test[teh-10116,de,start4].exe".
Shortcuts named "iqtest iqtest.lnk" and pointing to "illus.exe".
Shortcuts named "HIGHSPEED vip-10013.lnk" and pointing to "AdultCheck_GOLD_ID_Generator_v10_Crack.exe".
Shortcuts named "Linkrakete linkrakete.lnk" and pointing to "FREE-DOWNLOAD[linkrakete,de].exe".
Shortcuts named "Referate.de ref-10002.lnk" and pointing to "referate[ref-10002,de].exe".
Shortcuts named "SMS-Stadt sst-12754.lnk" and pointing to "SMS-Stadt[sst-12754,de].exe".
Shortcuts named "Referate ree-10323.lnk" and pointing to "spicktricks[ree-10323,de].exe".
Shortcuts named "tattooworld tod-10109.lnk" and pointing to "tattoos[tod-10109,de].exe".
Shortcuts named "Sternzeichen szn-10011.lnk" and pointing to "sternzeichen[szn-10011,de].exe".
Shortcuts named "Supergames srs-10001.lnk" and pointing to "installer[srs-10001,de].exe".
Shortcuts named "FastGame fte-10100.lnk" and pointing to "installer[fte-10100,de,16].exe".
Shortcuts named "XP-Antispy.de xp-antispy-de.lnk" and pointing to "XP-Antispy_de[xp-antispy-de,de].exe".
Shortcuts named "Pflanzen pla-10006.lnk" and pointing to "pflanzen[pla-10006,de].exe".
Shortcuts named "Lehrstellen lhs-10004.lnk" and pointing to "lehrstellen[lhs-10004,de].exe".
Shortcuts named "Hackz-Site hzs-10030.lnk" and pointing to "hzs-10030.exe".
Shortcuts named "Alle-Nackt ant-10102.lnk" and pointing to "Britney Spears Nackt.exe".
Shortcuts named "Celeb-Fakes cf-10109.lnk" and pointing to "britney_fuck.exe".
Shortcuts named "Celeb-Fakes cf-10109.lnk" and pointing to "lopez_blowjob[1].mpg.exe".
Shortcuts named "Gifsworld gwd-10425.lnk" and pointing to "gifsworld.exe".
Shortcuts named "Celeb-Fakes cf-10109.lnk" and pointing to "sarah_michelle_gellar_nude[1].avi.exe".
Shortcuts named "Hausaufgaben hun-10051.lnk" and pointing to "Hausaufgaben[hun-10051,de,1].exe".
Shortcuts named "Priggle pgg-10007.lnk" and pointing to "Priggle-pgg-10007.exe".
Shortcuts named "P2P p2p-10051.lnk" and pointing to "p2p-[p2p-10051,de].exe".
Shortcuts named "Intexus xp-antispy-de.lnk" and pointing to "XP-Antispy_de[xp-antispy-de,de].exe".
Shortcuts named "cheatspur chp-10022.lnk" and pointing to "cheats[chp-10022,de].exe".
Shortcuts named "Gamespur ger-10073.lnk" and pointing to "games[ger-10073,de].exe".
Shortcuts named "GamezAG gmz-10004.lnk" and pointing to "GamezAG[gmz-10004,de,lay1].exe".
Shortcuts named "Games-Archiv.com games-archiv-com.lnk" and pointing to "Games-Archiv[games-archiv-com,de].exe".
Shortcuts named "SMS-Chef smf-10006.lnk" and pointing to "SMS-Chef[smf-10006,de].exe".
Shortcuts named "Hausaufgaben hun-10002.lnk" and pointing to "hausaufgaben[hun-10002,de].exe".
Shortcuts named "loesungsbuch.de loesungsbuch-de.lnk" and pointing to "loesungsbuch[loesungsbuch-de,de].exe".
Shortcuts named "Brautberater.de bbr-10137.lnk" and pointing to "hochzeit[bbr-10137,de].exe".
Shortcuts named "P2P p2p-10111.lnk" and pointing to "p2p[p2p-10111,d].exe".
Shortcuts named "P2P p2p-10253.lnk" and pointing to "p2p[p2p-10253,de].exe".
Shortcuts named "Rauchen rcn-10001.lnk" and pointing to "rauchen[rcn-10001,de].exe".
Shortcuts named "Rauchen rcn-10001.lnk" and pointing to "rauchen[rcn-10001,de]_001.exe".
Shortcuts named "Kunst knt-10005.lnk" and pointing to "installer[knt-10005,de].exe".
Shortcuts named "P2P p2p-10074.lnk" and pointing to "installer[p2p-10074,de].exe".
Shortcuts named "P2P p2p-10078.lnk" and pointing to "installer[p2p-10078,de].exe".
Shortcuts named "SMS-Stadt sst-11958.lnk" and pointing to "installer[sst-11958,de].exe".
Shortcuts that include "iMeshV3.2.exe" in the target they point to.
Shortcuts that include "Dialer-RAS.D.gen.exe" in the target they point to.
Shortcuts that include "Piratos p-10325.exe" in the target they point to.
Shortcuts that include "erotikpalast.exe" in the target they point to.
Shortcuts that include "Seca 2 file downloader.exe" in the target they point to.
Shortcuts that include "sofortzugang.exe" in the target they point to.
Shortcuts that include "hacker-reporte.exe" in the target they point to.
Shortcuts that include "H-C-W-S.exe" in the target they point to.
Shortcuts that include "downloadtool.exe" in the target they point to.
Shortcuts that include "kontaktstudio24.exe" in the target they point to.
Shortcuts that include "sms-sprueche-archiv.exe" in the target they point to.
Shortcuts that include "encoder-crack.exe" in the target they point to.
Shortcuts that include "powerservertool.exe" in the target they point to.
Shortcuts that include "showtime.exe" in the target they point to.
Shortcuts that include "rottencom.exe" in the target they point to.
Shortcuts that include "hacking4life.exe" in the target they point to.
Shortcuts that include "brennsoftware.exe" in the target they point to.
Shortcuts that include "sicherheit.exe" in the target they point to.
Shortcuts that include "genialos.exe" in the target they point to.
Shortcuts that include "hackercd-online.exe" in the target they point to.
Shortcuts that include "stardialer.exe" in the target they point to.
Shortcuts that include "security.exe" in the target they point to.
Shortcuts that include "security-portal-zugang.exe" in the target they point to.
Shortcuts that include "funworld.exe" in the target they point to.
Shortcuts that include "girlscam.exe" in the target they point to.
Shortcuts that include "handy6.exe" in the target they point to.
Shortcuts that include "\virus scannersr.exe" in the target they point to.
Shortcuts that include "CBS_Direkt.exe" in the target they point to.
Shortcuts that include "\downloadserver.exe" in the target they point to.
Shortcuts that include "\downloadtool2.exe" in the target they point to.
Shortcuts that include "\filmstart.exe" in the target they point to.
Shortcuts that include "\Gratis-Sex-Crack.exe" in the target they point to.
Shortcuts that include "\sexcrackdialer.exe" in the target they point to.
Shortcuts that include "\live-flirtline.exe" in the target they point to.
Shortcuts that include "\virenschutz.exe" in the target they point to.
Shortcuts that include "geil.exe" in the target they point to.
Shortcuts that include "Hacker Spider.exe" in the target they point to.
Shortcuts that include "hacker-reporte.exe" in the target they point to.
Shortcuts that include "Outdoor.exe" in the target they point to.
Shortcuts that include "SMS_PlugIn.exe" in the target they point to.
Shortcuts that include "virus scannersr.exe" in the target they point to.
Shortcuts that include "suoneria8.exe" in the target they point to.
Start Menu:
Please remove the following items from your start menu.
To check where they are pointing to, right-click them and choose "Properties" from the context menu appearing.
Groups that have "- Celeb-Fakes -" in their name.
Groups that have "- Gifsworld -" in their name.
Items named "P2P p2p-10078.lnk" and pointing to "installer[p2p-10078,de].exe".
Groups named "- Prodialer -".
Items that include "iMeshV3.2.exe" in the target they point to.
Items that include "Dialer-RAS.D.gen.exe" in the target they point to.
Items that include "Piratos p-10325.exe" in the target they point to.
Groups named "- Piratos -".
Groups named "- Erotikpalast -".
Groups named "- Hackersnake -".
Items that include "sofortzugang.exe" in the target they point to.
Groups named "- sofortzugang -".
Items that include "hacker-reporte.exe" in the target they point to.
Items that include "H-C-W-S.exe" in the target they point to.
Groups named "- H-C-W-S -".
Items that include "downloadtool.exe" in the target they point to.
Groups named "- Warez Dealer Download Server -".
Items that include "kontaktstudio24.exe" in the target they point to.
Groups named "- Kontaktstudio24 -".
Items that include "sms-sprueche-archiv.exe" in the target they point to.
Groups named "- SMS-SPRUECHE-ARCHIV -".
Items that include "encoder-crack.exe" in the target they point to.
Groups named "- hackerag -".
Items that include "powerservertool.exe" in the target they point to.
Items that include "showtime.exe" in the target they point to.
Groups named "- rottencom -".
Groups named "- Onlinehacker -".
Groups named "- Hacker Spider -".
Groups named "- Genialos -".
Groups named "- Hackercd-Online -".
Items that include "stardialer.exe" in the target they point to.
Items that include "security.exe" in the target they point to.
Items that include "security-portal-zugang.exe" in the target they point to.
Groups named "- Funny -".
Groups named "- Girlscam -".
Groups named "- Handy6 -".
Items that include "handy6.exe" in the target they point to.
Groups named "- Key-DB -".
Groups named "- Erotik pur -".
Groups named "- Livesex -".
Groups named "- Live-Flirtline -".
Groups named "- Hobby-Hacker -".
Items that include "geil.exe" in the target they point to.
Items that include "Hacker Spider.exe" in the target they point to.
Groups named "- hacker-reporte -".
Items that include "hacker-reporte.exe" in the target they point to.
Groups named "- LiveShow -".
Items that include "Outdoor.exe" in the target they point to.
Groups named "- SMS-Versand -".
Items that include "SMS_PlugIn.exe" in the target they point to.
Items that include "virus scannersr.exe" in the target they point to.
Items that include "suoneria8.exe" in the target they point to.
Files:
Please use Windows Explorer or another file manager of your choice to locate and delete these files.
A file with an unknown location named "word.doc".
A file with an unknown location named "ibsload.ocx".
A file with an unknown location named "installer[sst-11463,de].exe".
A file with an unknown location named "dialer_activex.ocx".
The file at "<$WINDIR>\gedichte[ggg-10003,de].exe".
A file with an unknown location named "gedichte[gdi-10046,de].exe".
A file with an unknown location named "schulstadt[sla-10367,de].exe".
A file with an unknown location named "sexsmilies[sexsmilies,de].exe".
A file with an unknown location named "hochzeit[hcg-10021,de,lay1].exe".
A file with an unknown location named "smilie-fabrik[smilie-fabrik,de].exe".
A file with an unknown location named "lebenslauf[lba-10001,de].exe".
A file with an unknown location named "azureus[p2p-10113,de].exe".
A file with an unknown location named "firewall[hcd-11563,de].exe".
A file with an unknown location named "SHOCKER[sor-10040,de].exe".
A file with an unknown location named "Explor.exe".
A file with an unknown location named "OD-TEEN203.EXE".
A file with an unknown location named "CleverCrackers[ccs-10007,en,ccs-10007.exe".
A file with an unknown location named "StarInstall[1].ocx".
A file with an unknown location named "feier[fir-10002,de].exe".
A file with an unknown location named "downloadserver.exe".
A file with an unknown location named "5a8ed794d89583d08.exe".
A file with an unknown location named "GO.exe".
A file with an unknown location named "Readme.txt".
The file at "<$WINDIR>\APPLOG\ASD.LGC".
A file with an unknown location named "Dialer.ocx".
A file with an unknown location named "PornstarNet[por-10171,de].exe".
A file with an unknown location named "PornstarNet por-10171.exe".
A file with an unknown location named "Witze[witzekontor-de,de].exe".
A file with an unknown location named "gameXXL[gamexxl-de,de].exe".
A file with an unknown location named "tattoo[toa-10044,de].exe".
A file with an unknown location named "hentai[hv-10248,de].exe".
A file with an unknown location named "abnehmen[deg-10019,de].exe".
A file with an unknown location named "adultporn-tv[apv-10036,de].exe".
A file with an unknown location named "Alternativheilung[ahm-10001,de].exe".
A file with an unknown location named "boysline[bl-10551,de].exe".
A file with an unknown location named "castingtipps[cns-10066,de].exe".
A file with an unknown location named "CelebritySkin[cbs-10105,de].exe".
A file with an unknown location named "cheats[chp-10088,de].exe".
A file with an unknown location named "Cheats[csg-10096,de].exe".
A file with an unknown location named "funkings[fun-10213,de].exe".
A file with an unknown location named "funnyworld[fyd-10244,de,2-0].exe".
A file with an unknown location named "gifsworld[gwd-10728,de].exe".
A file with an unknown location named "games[ger-10460,de].exe".
A file with an unknown location named "game-spider[gamespider,de].exe".
A file with an unknown location named "grusskarte4u[g4u-10051,de].exe".
A file with an unknown location named "grusskarten[gag-10082,de].exe".
A file with an unknown location named "HaiAlarm[bre-10001,de].exe".
A file with an unknown location named "Individuell-Abnehmen[iln-10005,de,01].exe".
A file with an unknown location named "jungeboys[jgb-10083,de].exe".
A file with an unknown location named "Kasino[kng-10025,de].exe".
A file with an unknown location named "kontaktanzeigen[kan-10777,de].exe".
A file with an unknown location named "Liebesbriefe[lbi-10027,de].exe".
A file with an unknown location named "logoalarm[lam-11437,de].exe".
A file with an unknown location named "Probendatenbank[pcm-10100,de].exe".
A file with an unknown location named "Smiley[syc-10030,de].exe".
A file with an unknown location named "SMS-Fun[sud-10135,de].exe".
A file with an unknown location named "smsstadt[sst-11022,de].exe".
A file with an unknown location named "sternzeichen[szn-10020,de].exe".
A file with an unknown location named "tattoos[tod-10013,de].exe".
A file with an unknown location named "zaubertricks[zre-10084,de,l-1].exe".
A file with an unknown location named "Witzealarm[waa-10011,de].exe".
A file with an unknown location named "SMS-SPIDER[ssp-10106,de].exe".
A file with an unknown location named "Tangafun[tgn-10033,de].exe".
A file with an unknown location named "StarsNackt[ssf-10476,de].exe".
A file with an unknown location named "smsmanager[swr-10136,de].exe".
A file with an unknown location named "Onlinehacker[oha-10269,de].exe".
A file with an unknown location named "p2p[p2p-10280,de].exe".
A file with an unknown location named "Rezepte.exe".
A file with an unknown location named "flirty[fiy-10034,de].exe".
A file with an unknown location named "geniale-rezepte[grt-10006,de].exe".
A file with an unknown location named "geniale-rezepte[grt-10016,de].exe".
A file with an unknown location named "geschenkidee[gsi-10016,de].exe".
A file with an unknown location named "gifsworld[gwd-10461,de].exe".
A file with an unknown location named "hausaufgaben[hausaufgaben,de,SIDx_x2_hausaufgaben.com_pD9E3A279.dip.t-dialin.net_217.227.162.121].exe".
A file with an unknown location named "hochzeit[bbr-10015,de].exe".
A file with an unknown location named "Horoskop_erstellen[aie-10056,de].exe".
A file with an unknown location named "humor[hug-10053,de,9-0].exe".
A file with an unknown location named "loesungsbuch[lbu-10001,de,2514].exe".
A file with an unknown location named "vornamen[vnf-10033,de].exe".
A file with an unknown location named "VIDEO2[h2t-10062,de,10-0].exe".
A file with an unknown location named "tattoo-sex[tue-10004,de].exe".
A file with an unknown location named "spicker[spi-10016,de].exe".
A file with an unknown location named "songtextzone[xzo-10012,de].exe".
A file with an unknown location named "spass24[sp4-10279,de].exe".
A file with an unknown location named "SMS-Tool[met-10308,de].exe".
A file with an unknown location named "schulstadt[sla-10112,de].exe".
A file with an unknown location named "routenplaner[rai-10062,de].exe".
A file with an unknown location named "MobileGuru[mlu-10576,de].exe".
A file with an unknown location named "REZEPTE.EXE".
A file with an unknown location named "rezepte[ike-10025,de].exe".
A file with an unknown location named "modeberater[mbr-10038,de].exe".
A file with an unknown location named "megagif[maf-10416,de].exe".
A file with an unknown location named "Kochrezepte[kzc-10061,de].exe".
A file with an unknown location named "homepagevorlagen[mvn-10023,de].exe".
A file with an unknown location named "Bilderkiste_Fotos[bilderkiste-de,de].exe".
A file with an unknown location named "cheats[tc4-10049,de].exe".
A file with an unknown location named "GifProfi[gpi-10292,de].exe".
A file with an unknown location named "Gif-Seite[gse-10097,de].exe".
A file with an unknown location named "Hochzeit[htr-10014,de].exe".
A file with an unknown location named "MMSjack[mjk-10176,de].exe".
A file with an unknown location named "MP3-Legal[mll-10091,de].exe".
A file with an unknown location named "Quiz_starten[qne-10214,de].exe".
A file with an unknown location named "referate[loesungsbuch-com,de].exe".
A file with an unknown location named "SMS-Stadt[sst-11662,de].exe".
A file with an unknown location named "test[teh-10066,de,start4].exe".
A file with an unknown location named "Clipartland[cld-10179,de].exe".
A file with an unknown location named "Trilian.exe".
A file with an unknown location named "0157.exe".
A file with an unknown location named "664.exe".
A file with an unknown location named "01511.exe".
A file with an unknown location named "01520.exe".
A file with an unknown location named "01566.exe".
A file with an unknown location named "Hacker Spider.exe".
A file with an unknown location named "free-connector.exe".
A file with an unknown location named "Sicherheit.exe".
A file with an unknown location named "klingeltoene[sst-12804,de].exe".
A file with an unknown location named "smsstadt[sst-11958,de].exe".
A file with an unknown location named "smsstadt[sst-12560,de].exe".
A file with an unknown location named "ECARDS~1.EXE".
A file with an unknown location named "Aersche24[ahe-10013,de].EXE".
A file with an unknown location named "AnimeDesktop[adp-10083,de].exe".
A file with an unknown location named "ausreden[ree-10064,de].exe".
A file with an unknown location named "ANIMIE~1.EXE".
A file with an unknown location named "79.exe".
A file with an unknown location named "0159.exe".
A file with an unknown location named "01505.EXE".
A file with an unknown location named "0160.EXE".
A file with an unknown location named "0171.EXE".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$WINDIR>\Downloaded Program Files\dialer_activex.inf".
The file at "<$WINDIR>\Downloaded Program Files\dialer_activex.ocx".
The file at "<$WINDIR>\Downloaded Program Files\StarInstall.ocx".
A file with an unknown location named "gedichte[ged10006,de].exe".
A file with an unknown location named "vornamen[vnn-10019,de].exe".
A file with an unknown location named "smsstadt[sst-11184,de].exe".
A file with an unknown location named "test.exe".
A file with an unknown location named "Erotic-Master[erotic-master,de].exe".
A file with an unknown location named "fun24[fmv-10286,de].exe".
A file with an unknown location named "FunFunFun[fs-10757,de].exe".
A file with an unknown location named "gifsworld[gifsworld,de].exe".
A file with an unknown location named "gifsworld[gwd-10005,de].exe".
A file with an unknown location named "test[teh-10067,de,start4].exe".
A file with an unknown location named "abnehmen[deg-10129,de].exe".
A file with an unknown location named "Bewerbung[bbh-10061,de].exe".
A file with an unknown location named "BRIEFE[lbi-10016,de].exe".
A file with an unknown location named "cocktails[ccp-10097,de].exe".
A file with an unknown location named "geburtstag[grg-10097,de].exe".
A file with an unknown location named "gifsworld[gwd-10927,de].exe".
A file with an unknown location named "Hackerz[hz-10046,de].exe".
A file with an unknown location named "hausaufgaben[hun-10222,de].exe".
A file with an unknown location named "Horoskop_erstellen[aie-10070,de].exe".
A file with an unknown location named "Liebesbriefe[lbi-10023,de,start].exe".
A file with an unknown location named "IQTest[itt-10528,de].exe".
A file with an unknown location named "liebe[sst-11958,de].exe".
A file with an unknown location named "Klingeltoene[hpa-10336,de].exe".
A file with an unknown location named "test[teh-10116,de,start4].exe".
A file with an unknown location named "illus.exe".
A file with an unknown location named "AdultCheck_GOLD_ID_Generator_v10_Crack.exe".
A file with an unknown location named "FREE-DOWNLOAD[linkrakete,de].exe".
A file with an unknown location named "referate[ref-10002,de].exe".
A file with an unknown location named "installer[sst-11958,de].exe".
A file with an unknown location named "installer[p2p-10074,de].exe".
A file with an unknown location named "SMS-Stadt[sst-12754,de].exe".
A file with an unknown location named "spicktricks[ree-10323,de].exe".
A file with an unknown location named "tattoos[tod-10109,de].exe".
A file with an unknown location named "sternzeichen[szn-10011,de].exe".
A file with an unknown location named "installer[srs-10001,de].exe".
A file with an unknown location named "installer[fte-10100,de,16].exe".
A file with an unknown location named "hochzeit[bbr-10137,de].exe".
A file with an unknown location named "XP-Antispy_de[xp-antispy-de,de].exe".
A file with an unknown location named "pflanzen[pla-10006,de].exe".
A file with an unknown location named "lehrstellen[lhs-10004,de].exe".
A file with an unknown location named "hausaufgaben[hun-10002,de].exe".
A file with an unknown location named "hzs-10030.exe".
A file with an unknown location named "Britney Spears Nackt.exe".
A file with an unknown location named "britney_fuck.exe".
A file with an unknown location named "britney_nippleslip[1].avi.exe".
A file with an unknown location named "lopez_blowjob[1].mpg.exe".
A file with an unknown location named "gifsworld.exe".
A file with an unknown location named "sarah_michelle_gellar_nude[1].avi.exe".
A file with an unknown location named "Manga-Sex.exe".
A file with an unknown location named "Hausaufgaben[hun-10051,de,1].exe".
A file with an unknown location named "Priggle-pgg-10007.exe".
A file with an unknown location named "p2p-[p2p-10051,de].exe".
A file with an unknown location named "XP-Antispy_de[xp-antispy-de,de].exe".
A file with an unknown location named "cheats[chp-10022,de].exe".
A file with an unknown location named "games[ger-10073,de].exe".
A file with an unknown location named "GamezAG[gmz-10004,de,lay1].exe".
A file with an unknown location named "Games-Archiv[games-archiv-com,de].exe".
A file with an unknown location named "SMS-Chef[smf-10006,de].exe".
A file with an unknown location named "hausaufgaben[hun-10002,de]_001.exe".
A file with an unknown location named "hausaufgaben[hun-10002,de].exe".
A file with an unknown location named "loesungsbuch[loesungsbuch-de,de].exe".
A file with an unknown location named "p2p[p2p-10111,d].exe".
A file with an unknown location named "p2p[p2p-10253,de].exe".
A file with an unknown location named "rauchen[rcn-10001,de].exe".
A file with an unknown location named "rauchen[rcn-10001,de]_001.exe".
A file with an unknown location named "installer[knt-10005,de].exe".
A file with an unknown location named "iMeshV3.2.exe".
A file with an unknown location named "Dialer-RAS.D.gen.exe".
A file with an unknown location named "Piratos p-10325.exe".
A file with an unknown location named "erotikpalast.exe".
A file with an unknown location named "Seca 2 file downloader.exe".
A file with an unknown location named "sofortzugang.exe".
The file at "<$WINDIR>\hacker-reporte.exe".
The file at "<$SYSDIR>\hacker-reporte.exe".
A file with an unknown location named "H-C-W-S.exe".
The file at "<$WINDIR>\H-C-W-S.exe".
The file at "<$SYSDIR>\H-C-W-S.exe".
A file with an unknown location named "downloadtool.exe".
The file at "<$WINDIR>\downloadtool.exe".
The file at "<$SYSDIR>\downloadtool.exe".
A file with an unknown location named "kontaktstudio24.exe".
The file at "<$WINDIR>\kontaktstudio24.exe".
The file at "<$SYSDIR>\kontaktstudio24.exe".
A file with an unknown location named "sms-sprueche-archiv.exe".
The file at "<$WINDIR>\sms-sprueche-archiv.exe".
The file at "<$SYSDIR>\sms-sprueche-archiv.exe".
A file with an unknown location named "encoder-crack.exe".
The file at "<$WINDIR>\encoder-crack.exe".
The file at "<$SYSDIR>\encoder-crack.exe".
A file with an unknown location named "powerservertool.exe".
The file at "<$WINDIR>\powerservertool.exe".
The file at "<$SYSDIR>\powerservertool.exe".
A file with an unknown location named "showtime.exe".
The file at "<$WINDIR>\showtime.exe".
The file at "<$SYSDIR>\showtime.exe".
A file with an unknown location named "rottencom.exe".
A file with an unknown location named "hacking4life.exe".
A file with an unknown location named "brennsoftware.exe".
A file with an unknown location named "sicherheit.exe".
A file with an unknown location named "genialos.exe".
A file with an unknown location named "hackercd-online.exe".
A file with an unknown location named "stardialer.exe".
A file with an unknown location named "security.exe".
A file with an unknown location named "security-portal-zugang.exe".
A file with an unknown location named "funworld.exe".
A file with an unknown location named "girlscam.exe".
A file with an unknown location named "handy6.exe".
A file with an unknown location named "hacker-reporte.exe".
A file with an unknown location named "Hackers-FreiFick.exe".
A file with an unknown location named "CBS_Direkt.exe".
A file with an unknown location named "downloadtool2.exe".
A file with an unknown location named "filmstart.exe".
A file with an unknown location named "Gratis-Sex-Crack.exe".
A file with an unknown location named "sexcrackdialer.exe".
A file with an unknown location named "live-flirtline.exe".
A file with an unknown location named "virenschutz.exe".
A file with an unknown location named "geil.exe".
A file with an unknown location named "Hacker Spider.exe".
A file with an unknown location named "hacker-reporte.exe".
A file with an unknown location named "Outdoor.exe".
A file with an unknown location named "SMS_PlugIn.exe".
A file with an unknown location named "virus scannersr.exe".
A file with an unknown location named "suoneria8.exe".
The file at "<$WINDIR>\SUONERIA8.EXE".
Make sure you set your file manager to display hidden and system files. If MainPean uses rootkit technologies, use our RootAlyzer (http://forums.spybot.info/downloads.php?id=8) or our Total Commander anti-rootkit plugins (http://forums.spybot.info/downloads.php?id=3).
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!
Important: There are more files that cannot be safely described in simple words. Please use Spybot-S&D (http://www.safer-networking.org/index.php?page=spybotsd) to remove them.
Folders:
Please use Windows Explorer or another file manager of your choice to locate and delete these folders.
The directory at "<$PROGRAMS>\- Koch Ideen -".
The directory at "<$PROGRAMS>\- Gedichte.it -".
The directory at "<$PROGRAMS>\- gedicht -".
The directory at "<$PROGRAMS>\- SexSmilies -".
The directory at "<$PROGRAMS>\- Hochzeit.ag -".
The directory at "<$PROGRAMS>\- Smilie-Fabrik -".
The directory at "<$PROGRAMS>\- lebenslauf.de -".
The directory at "<$PROGRAMS>\- shocker -".
The directory at "<$PROGRAMS>\- CleverCrackers -".
The directory at "<$DIR_PROGGROUP>\- feier -".
The directory at "<$PROGRAMS>\- MonsterMMS -".
The directory at "<$PROGRAMS>\- PornstarNet -".
The directory at "<$PROGRAMS>\- Witzekontor.de - Einmal richtig ablachen -".
The directory at "<$PROGRAMS>\- gameXXL.de -".
The directory at "<$PROGRAMS>\- Tattoo Mania -".
The directory at "<$PROGRAMS>\- Hentai.tv -".
The directory at "<$PROGRAMS>\- adultporn.tv -".
The directory at "<$PROGRAMS>\- alternativ-heilung.com -".
The directory at "<$PROGRAMS>\- Boysline -".
The directory at "<$PROGRAMS>\- castingtipps -".
The directory at "<$PROGRAMS>\- CelebritySkin -".
The directory at "<$PROGRAMS>\- Cheats24.org -".
The directory at "<$PROGRAMS>\- FUNKINGS -".
The directory at "<$PROGRAMS>\- Funnyworld -".
The directory at "<$PROGRAMS>\- IntexusDial -".
The directory at "<$PROGRAMS>\- Flirty -".
The directory at "<$PROGRAMS>\- geniale-rezepte -".
The directory at "<$PROGRAMS>\- geschenkidee -".
The directory at "<$PROGRAMS>\- Hausaufgaben Direktzugang -".
The directory at "<$PROGRAMS>\- Humor.ag -".
The directory at "<$PROGRAMS>\- Vornamen-Fundus -".
The directory at "<$PROGRAMS>\- Humor24.net -".
The directory at "<$PROGRAMS>\- Tattootussis.de -".
The directory at "<$PROGRAMS>\- Spicken.info -".
The directory at "<$PROGRAMS>\- songtextzone -".
The directory at "<$PROGRAMS>\- Spass24 -".
The directory at "<$PROGRAMS>\- MobileTunes -".
The directory at "<$PROGRAMS>\- schulstadt -".
The directory at "<$PROGRAMS>\- Routenplaner.AG -".
The directory at "<$PROGRAMS>\- Routenplaner Profi -".
The directory at "<$PROGRAMS>\- MobileGuru -".
The directory at "<$PROGRAMS>\- Priggle -".
The directory at "<$PROGRAMS>\- ich-koche -".
The directory at "<$PROGRAMS>\- modeberater -".
The directory at "<$PROGRAMS>\- MegaGIF -".
The directory at "<$PROGRAMS>\- Kochrezepte.cc -".
The directory at "<$PROGRAMS>\- Monster Vorlagen -".
The directory at "<$PROGRAMS>\- Bilderkiste.de -".
The directory at "<$PROGRAMS>\- cheats.fm -".
The directory at "<$PROGRAMS>\- GifProfi -".
The directory at "<$PROGRAMS>\- gif-seite -".
The directory at "<$PROGRAMS>\- hochzeits-feier -".
The directory at "<$PROGRAMS>\- MMSjack -".
The directory at "<$PROGRAMS>\- MP3-Legal -".
The directory at "<$PROGRAMS>\- Quizrunden.de -".
The directory at "<$PROGRAMS>\- loesungsbuch.com -".
The directory at "<$PROGRAMS>\- Clipartland -".
The directory at "<$PROGRAMS>\- Trilian-de -".
The directory at "<$PROGRAMS>\- sendman -".
The directory at "<$PROGRAMS>\- HW-Setup -".
The directory at "- eCards -".
The directory at "<$PROGRAMS>\- Aersche24.de -".
The directory at "<$PROGRAMS>\- Animedesktop -".
The directory at "<$PROGRAMS>\- Animierte-Gifs.de -".
The directory at "<$WINDIR>\<$PROGRAMS>\- gedichte -".
The directory at "<$WINDIR>\<$PROGRAMS>\- vornamen -".
The directory at "<$PROGRAMS>\- testedich -".
The directory at "<$PROGRAMS>\- Erotic-Master -".
The directory at "<$PROGRAMS>\- fun-movies -".
The directory at "<$PROGRAMS>\- Funnyserver -".
The directory at "<$PROGRAMS>\- gifsworld -".
The directory at "<$PROGRAMS>\- DIAET.AG -".
The directory at "<$PROGRAMS>\- bewerbe-dich -".
The directory at "<$PROGRAMS>\- Liebesbriefe -".
The directory at "<$PROGRAMS>\- cocktail-partys -".
The directory at "<$PROGRAMS>\- Geburtstag -".
The directory at "<$PROGRAMS>\- Hackerz -".
The directory at "<$PROGRAMS>\- Astrofieber.de -".
The directory at "<$PROGRAMS>\- iqtest -".
The directory at "<$PROGRAMS>\- SMS-Stadt -".
The directory at "<$PROGRAMS>\- Gamer.AG -".
The directory at "<$PROGRAMS>\- HIGHSPEED -".
The directory at "<$PROGRAMS>\- Hausaufgaben -".
The directory at "<$PROGRAMS>\- Linkrakete -".
The directory at "<$PROGRAMS>\- Hackercd-Online -".
The directory at "<$PROGRAMS>\- Referate.de -".
The directory at "<$PROGRAMS>\- Referate -".
The directory at "<$PROGRAMS>\- tattooworld -".
The directory at "<$PROGRAMS>\- Sternzeichen -".
The directory at "<$PROGRAMS>\- Supergames -".
The directory at "<$PROGRAMS>\- FastGame -".
The directory at "<$PROGRAMS>\- XP-Antispy.de -".
The directory at "<$PROGRAMS>\- Pflanzen -".
The directory at "<$PROGRAMS>\- Lehrstellen -".
The directory at "<$PROGRAMS>\- Hackz-Site -".
The directory at "<$PROGRAMS>\- Alle-Nackt -".
The directory at "<$PROGRAMS>\- Manga-Sex -".
The directory at "<$PROGRAMS>\- Intexus -".
The directory at "<$PROGRAMS>\- cheatspur -".
The directory at "<$PROGRAMS>\- Gamespur -".
The directory at "<$PROGRAMS>\- GamezAG -".
The directory at "<$PROGRAMS>\- Games-Archiv.com -".
The directory at "<$PROGRAMS>\- SMS-Chef -".
The directory at "<$PROGRAMS>\- loesungsbuch.de -".
The directory at "<$PROGRAMS>\- Brautberater.de -".
The directory at "<$PROGRAMS>\- Rauchen -".
The directory at "<$PROGRAMS>\- Kunst -".
The directory at "<$PROGRAMS>\- P2P -".
Make sure you set your file manager to display hidden and system files. If MainPean uses rootkit technologies, use our RootAlyzer (http://forums.spybot.info/downloads.php?id=8) or our Total Commander anti-rootkit plugins (http://forums.spybot.info/downloads.php?id=3).
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify folders!
Registry:
You can use regedit.exe (included in Windows) to locate and delete these registry entries.
Delete the registry key "{8702d9e1-890b-4bf2-a233-fa44e582b2de}" at "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\".
Delete the registry key "{d53b810f-6219-11d4-95b6-0040950375e7}" at "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\".
Delete the registry key "Best Porno Netzwerk" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "Best Porno Netzwerk" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "Porn1747275" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "Porn1747275" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
A key in HKEY_CLASSES_ROOT\ named "ACTIVEXDOWNLOAD.ActiveXDownloadCtrl.1", plus associated values.
Delete the registry key "{E0B795B4-FD95-4ABD-A375-27962EFCE8CF}" at "HKEY_CLASSES_ROOT\CLSID\".
A key in HKEY_CLASSES_ROOT\ named "DIALERACTIVEX.DialeractivexCtrl.1", plus associated values.
Delete the registry key "{D53B8112-6219-11D4-95B6-0040950375E7}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "{D53B8110-6219-11D4-95B6-0040950375E7}" at "HKEY_CLASSES_ROOT\Interface\".
Delete the registry key "{D53B810F-6219-11D4-95B6-0040950375E7}" at "HKEY_CLASSES_ROOT\TypeLib\".
Delete the registry key "HKEY_CLASSES_ROOT\CLSID\{D037F883-92C3-4F89-A302-C01127CF3C72}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "HKEY_CLASSES_ROOT\CLSID\{E0B795B4-FD95-4ABD-A375-27962EFCE8CF}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "HKEY_CLASSES_ROOT\Interface\{CD6B926C-903F-46A4-9C7D-F3839F081788}" at "HKEY_CLASSES_ROOT\TypeLib\".
Delete the registry key "{A30B0BEB-A992-4E4B-AF6E-EB9019C3E540}" at "HKEY_CLASSES_ROOT\TypeLib\".
Delete the registry key "{D53B810F-6219-11D4-95B6-0040950375E7}" at "HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\".
Delete the registry key "{D037F883-92C3-4F89-A302-C01127CF3C72}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "{B0CE21C5-6A79-45B7-AB9C-0008E75F2DBF}" at "HKEY_CLASSES_ROOT\Interface\".
Delete the registry key "{CD6B926C-903F-46A4-9C7D-F3839F081788}" at "HKEY_CLASSES_ROOT\Interface\".
Delete the registry key "IntexusDial" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "IntexusDial" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "IntexusDial" at "HKEY_LOCAL_MACHINE\Software\".
Delete the registry key "MainPean Highspeed" at "HKEY_LOCAL_MACHINE\Software\".
Delete the registry key "MainPean Highspeed" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "MainPean Highspeed" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "suoneria8" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "suoneria8" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "SUONERIA8.EXE" at "HKEY_CURRENT_USER\Software\".
If MainPean uses rootkit technologies, use our RegAlyzer (http://www.safer-networking.org/index.php?page=regalyzer), RootAlyzer (http://forums.spybot.info/downloads.php?id=8) or our Total Commander anti-rootkit plugins (http://forums.spybot.info/downloads.php?id=3).
Browser:
The following browser plugins or items can either be removed directly in your browser, or through the help of e.g. Spybot-S&D (http://www.safer-networking.org/index.php?page=spybotsd) or RunAlyzer (http://www.safer-networking.org/index.php?page=runalyzer).
Look for ActiveX software installed from "http://stardialer.de/install/StarInstall.ocx".
Final Words:
If neither Spybot-S&D nor self help did resolve the issue or you would prefer one on one help,
Please read these instructions (http://forums.spybot.info/showthread.php?t=288) before requesting assistance,
Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a volunteer analyst will advise you as soon as available.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.
If this guide was helpful to you, please consider donating towards this site (http://www.safer-networking.org/index.php?page=donate).
Threat Details:
Categories:
dialer
Description:
No real privacy policy, EULA is in german. Links to this dialer get sent as unrequested spam. Owner threatened to sue for molestation after asking him by mail to stop spam.
Supposed Functionality:
Dialer for Germany, Austria, Switzerland, UK, Netherlands, Spain, Australia, Sweden, Norway, Danmark, Belgium, Italy, Ireland, Greece, Hongkong, Japan
Links (be careful!):
Website: http://www.mainpean.de/
Product: http://help.stardialer.de/
Privacy: http://www.mainpean.de/content/agb.php
Removal Instructions:
Desktop:
Please remove the following files from your desktop.
To check where they are pointing to, right-click them and choose "Properties" from the context menu appearing.
Shortcuts named "SMS-Stadt sst-11463.lnk" and pointing to "installer[sst-11463,de].exe -l".
Shortcuts named "Koch Ideen kie-10009.lnk" and pointing to "KochIdeen[kie-10009,de].exe?-l".
Shortcuts named "Gedichte.it ggg-10003.lnk" and pointing to "<$WINDIR>\gedichte[ggg-10003,de].exe?-l".
Shortcuts named "gedicht gdi-10046.lnk" and pointing to "<$DESKTOP>\gedichte[gdi-10046,de].exe -l".
Shortcuts named "schulstadt sla-10367.lnk" and pointing to "<$DESKTOP>\schulstadt[sla-10367,de].exe -l".
Shortcuts named "SexSmilies sexsmilies.lnk" and pointing to "<$DESKTOP>\SexSmilies[sexsmilies,de].exe -l".
Shortcuts named "Hochzeit.ag hcg-10021.lnk" and pointing to "<$DESKTOP>\hochzeit[hcg-10021,de,lay1].exe -l".
Shortcuts named "Smilie-Fabrik smilie-fabrik.lnk" and pointing to "<$DESKTOP>\Smilie-Fabrik[smilie-fabrik,de].exe -l".
Shortcuts named "Routenplaner.AG rlg-10086.lnk" and pointing to "RoutenplanerAG[rlg-10086,de,].exe -l".
Shortcuts named "lebenslauf.de lba-10001.lnk" and pointing to "lebenslauf[lba-10001,de].exe -l".
Shortcuts named "P2P p2p-10113.lnk" and pointing to "azureus[p2p-10113,de].exe -l".
Shortcuts named "Hackercd-Online hcd-11563.lnk" and pointing to "firewall[hcd-11563,de].exe -l".
Shortcuts named "shocker sor-10040.lnk" and pointing to "SHOCKER[sor-10040,de].exe -l".
Shortcuts named "CleverCrackers ccs-10007.lnk" and pointing to "<$DESKTOP>\CleverCrackers[ccs-10007,en,ccs-10007.exe -l".
Shortcuts named "feier fir-10002.lnk" and pointing to "feier[fir-10002,de].exe -l".
Shortcuts named "MonsterMMS monstermms.lnk" and pointing to "5a8ed794d89583d08.exe -l".
Shortcuts named "PornstarNet por-10171.lnk" and pointing to "PornstarNet[por-10171,de].exe -l".
Shortcuts named "Witzekontor.de - Einmal richtig ablachen witzekontor-de.lnk" and pointing to "Witze[witzekontor-de,de].exe -l".
Shortcuts named "gameXXL.de gamexxl-de.lnk" and pointing to "gameXXL[gamexxl-de,de].exe -l".
Shortcuts named "Tattoo Mania toa-10044.lnk" and pointing to "tattoo[toa-10044,de].exe -l".
Shortcuts named "Hentai.tv hv-10248.lnk" and pointing to "hentai[hv-10248,de].exe -l".
Shortcuts named "DIAET.AG deg-10019.lnk" and pointing to "abnehmen[deg-10019,de].exe -l".
Shortcuts named "adultporn.tv apv-10036.lnk" and pointing to "adultporn-tv[apv-10036,de].exe -l".
Shortcuts named "alternativ-heilung.com ahm-10001.lnk" and pointing to "Alternativheilung[ahm-10001,de].exe -l".
Shortcuts named "Boysline bl-10551.lnk" and pointing to "boysline[bl-10551,de].exe -l".
Shortcuts named "castingtipps cns-10066.lnk" and pointing to "castingtipps[cns-10066,de].exe -l".
Shortcuts named "CelebritySkin cbs-10105.lnk" and pointing to "CelebritySkin[cbs-10105,de].exe -l".
Shortcuts named "cheatspur chp-10088.lnk" and pointing to "cheats[chp-10088,de].exe -l".
Shortcuts named "Cheats24.org csg-10096.lnk" and pointing to "Cheats[csg-10096,de].exe -l".
Shortcuts named "FUNKINGS fun-10213.lnk" and pointing to "funkings[fun-10213,de].exe -l".
Shortcuts named "Funnyworld fyd-10244.lnk" and pointing to "funnyworld[fyd-10244,de,2-0].exe -l".
Shortcuts named "gifsworld gwd-10728.lnk" and pointing to "gifsworld[gwd-10728,de].exe -l".
Shortcuts named "IntexusDial ger-10460.lnk" and pointing to "games[ger-10460,de].exe -l".
Shortcuts named "IntexusDial gamespider.lnk" and pointing to "game-spider[gamespider,de].exe -l".
Shortcuts named "IntexusDial g4u-10051.lnk" and pointing to "grusskarte4u[g4u-10051,de].exe -l".
Shortcuts named "IntexusDial gag-10082.lnk" and pointing to "grusskarten[gag-10082,de].exe -l".
Shortcuts named "IntexusDial bre-10001.lnk" and pointing to "HaiAlarm[bre-10001,de].exe -l".
Shortcuts named "IntexusDial iln-10005.lnk" and pointing to "Individuell-Abnehmen[iln-10005,de,01].exe -l".
Shortcuts named "IntexusDial jgb-10083.lnk" and pointing to "jungeboys[jgb-10083,de].exe -l".
Shortcuts named "IntexusDial kng-10025.lnk" and pointing to "Kasino[kng-10025,de].exe -l".
Shortcuts named "IntexusDial kan-10777.lnk" and pointing to "kontaktanzeigen[kan-10777,de].exe -l".
Shortcuts named "IntexusDial lbi-10027.lnk" and pointing to "Liebesbriefe[lbi-10027,de].exe -l".
Shortcuts named "IntexusDial lam-11437.lnk" and pointing to "logoalarm[lam-11437,de].exe -l".
Shortcuts named "IntexusDial pcm-10100.lnk" and pointing to "Probendatenbank[pcm-10100,de].exe -l".
Shortcuts named "IntexusDial syc-10030.lnk" and pointing to "Smiley[syc-10030,de].exe -l".
Shortcuts named "IntexusDial sud-10135.lnk" and pointing to "SMS-Fun[sud-10135,de].exe -l".
Shortcuts named "IntexusDial sst-11022.lnk" and pointing to "smsstadt[sst-11022,de].exe -l".
Shortcuts named "IntexusDial szn-10020.lnk" and pointing to "sternzeichen[szn-10020,de].exe -l".
Shortcuts named "IntexusDial tod-10013.lnk" and pointing to "tattoos[tod-10013,de].exe -l".
Shortcuts named "IntexusDial zre-10084.lnk" and pointing to "zaubertricks[zre-10084,de,l-1].exe -l".
Shortcuts named "IntexusDial waa-10011.lnk" and pointing to "Witzealarm[waa-10011,de].exe -l".
Shortcuts named "IntexusDial ssp-10106.lnk" and pointing to "SMS-SPIDER[ssp-10106,de].exe -l".
Shortcuts named "IntexusDial tgn-10033.lnk" and pointing to "Tangafun[tgn-10033,de].exe -l".
Shortcuts named "IntexusDial ssf-10476.lnk" and pointing to "StarsNackt[ssf-10476,de].exe -l".
Shortcuts named "IntexusDial swr-10136.lnk" and pointing to "smsmanager[swr-10136,de].exe -l".
Shortcuts named "IntexusDial oha-10269.lnk" and pointing to "Onlinehacker[oha-10269,de].exe -l".
Shortcuts named "IntexusDial p2p-10280.lnk" and pointing to "p2p[p2p-10280,de].exe -l".
Shortcuts named "Priggle priggle.lnk" and pointing to "Rezepte.exe*".
Shortcuts named "Flirty fiy-10034.lnk" and pointing to "flirty[fiy-10034,de].exe -l".
Shortcuts named "geniale-rezepte grt-10006.lnk" and pointing to "geniale-rezepte[grt-10006,de].exe -l".
Shortcuts named "geniale-rezepte grt-10016.lnk" and pointing to "geniale-rezepte[grt-10016,de].exe -l".
Shortcuts named "geschenkidee gsi-10016.lnk" and pointing to "geschenkidee[gsi-10016,de].exe -l".
Shortcuts named "gifsworld gwd-10461.lnk" and pointing to "gifsworld[gwd-10461,de].exe -l".
Shortcuts named "Hausaufgaben Direktzugang hausaufgaben.lnk" and pointing to "hausaufgaben[hausaufgaben,de,SIDx_x2_hausaufgaben.com_pD9E3A279.dip.t-dialin.net_217.227.162.121].exe -l".
Shortcuts named "Brautberater.de bbr-10015.lnk" and pointing to "hochzeit[bbr-10015,de].exe -l".
Shortcuts named "Astrofieber.de aie-10056.lnk" and pointing to "Horoskop_erstellen[aie-10056,de].exe -l".
Shortcuts named "Humor.ag hug-10053.lnk" and pointing to "humor[hug-10053,de,9-0].exe -l".
Shortcuts named "loesungsbuch.de lbu-10001.lnk" and pointing to "loesungsbuch[lbu-10001,de,2514].exe -l".
Shortcuts named "Vornamen-Fundus vnf-10033.lnk" and pointing to "vornamen[vnf-10033,de].exe -l".
Shortcuts named "Humor24.net h2t-10062.lnk" and pointing to "video2[h2t-10062,de,10-0].exe -l".
Shortcuts named "Tattootussis.de tue-10004.lnk" and pointing to "tattoo-sex[tue-10004,de].exe -l".
Shortcuts named "Spicken.info spi-10016.lnk" and pointing to "spicker[spi-10016,de].exe -l".
Shortcuts named "songtextzone xzo-10012.lnk" and pointing to "songtextzone[xzo-10012,de].exe -l".
Shortcuts named "Spass24 sp4-10279.lnk" and pointing to "spass24[sp4-10279,de].exe -l".
Shortcuts named "MobileTunes met-10308.lnk" and pointing to "SMS-Tool[met-10308,de].exe -l".
Shortcuts named "schulstadt sla-10112.lnk" and pointing to "schulstadt[sla-10112,de].exe -l".
Shortcuts named "Routenplaner.AG rlg-10234.lnk" and pointing to "RoutenplanerAG[rlg-10234,de,].exe -l".
Shortcuts named "Routenplaner Profi rai-10062.lnk" and pointing to "routenplaner[rai-10062,de].exe -l".
Shortcuts named "MobileGuru mlu-10576.lnk" and pointing to "MobileGuru[mlu-10576,de].exe -l".
Shortcuts named "Priggle priggle.lnk" and pointing to "Rezepte.exe -l".
Shortcuts named "ich-koche ike-10025.lnk" and pointing to "rezepte[ike-10025,de].exe -l".
Shortcuts named "modeberater mbr-10038.lnk" and pointing to "modeberater[mbr-10038,de].exe -l".
Shortcuts named "MegaGIF maf-10416.lnk" and pointing to "megagif[maf-10416,de].exe -l".
Shortcuts named "Kochrezepte.cc kzc-10061.lnk" and pointing to "Kochrezepte[kzc-10061,de].exe -l".
Shortcuts named "Monster Vorlagen mvn-10023.lnk" and pointing to "homepagevorlagen[mvn-10023,de].exe -l".
Shortcuts named "Bilderkiste.de bilderkiste-de.lnk" and pointing to "Bilderkiste_Fotos[bilderkiste-de,de].exe -l".
Shortcuts named "cheats.fm tc4-10049.lnk" and pointing to "cheats[tc4-10049,de].exe -l".
Shortcuts named "GifProfi gpi-10292.lnk" and pointing to "GifProfi[gpi-10292,de].exe -l".
Shortcuts named "gif-seite gse-10097.lnk" and pointing to "Gif-Seite[gse-10097,de].exe -l".
Shortcuts named "hochzeits-feier htr-10014.lnk" and pointing to "Hochzeit[htr-10014,de].exe -l".
Shortcuts named "MMSjack mjk-10176.lnk" and pointing to "MMSjack[mjk-10176,de].exe -l".
Shortcuts named "MP3-Legal mll-10091.lnk" and pointing to "MP3-Legal[mll-10091,de].exe -l".
Shortcuts named "Quizrunden.de qne-10214.lnk" and pointing to "Quiz_starten[qne-10214,de].exe -l".
Shortcuts named "loesungsbuch.com loesungsbuch-com.lnk" and pointing to "referate[loesungsbuch-com,de].exe -l".
Shortcuts named "SMS-Stadt sst-11662.lnk" and pointing to "SMS-Stadt[sst-11662,de].exe -l".
Shortcuts named "testedich teh-10066.lnk" and pointing to "test[teh-10066,de,start4].exe -l".
Shortcuts named "Clipartland cld-10179.lnk" and pointing to "Clipartland[cld-10179,de].exe -l".
Shortcuts named "Trilian-de trilian-de.lnk" and pointing to "Trilian.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0157.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0159.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01511.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01520.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01566.exe -l".
Shortcuts named "Hobby-Hacker hcw-10112.lnk" and pointing to "virenschutz.exe -l".
Shortcuts named "Hacker Spider hgr-13000.lnk" and pointing to "Hacker Spider.exe -l".
Shortcuts named "Hacker Spider hgr-10005.lnk" and pointing to "free-connector.exe -l".
Shortcuts named "Hacker Spider hgr-10331.lnk" and pointing to "Sicherheit.exe".
Shortcuts named "SMS-Stadt sst-12804.lnk" and pointing to "klingeltoene[sst-12804,de].exe -l".
Shortcuts named "SMS-Stadt sst-11958.lnk" and pointing to "smsstadt[sst-11958,de].exe -l".
Shortcuts named "SMS-Stadt sst-12754.lnk" and pointing to "SMS-Stadt[sst-12754,de].exe -l".
Shortcuts named "SMS-Stadt sst-12560.lnk" and pointing to "smsstadt[sst-12560,de].exe -l".
Shortcuts named "eCards eas-10094.lnk" and pointing to "eCards[eas-10094,de].exe -l".
Shortcuts named "Aersche24.de ahe-10013.lnk" and pointing to "Aersche24[ahe-10013,de].exe -l".
Shortcuts named "Animedesktop adp-10083.lnk" and pointing to "AnimeDesktop[adp-10083,de].exe -l".
Shortcuts named "Referate ree-10064.lnk" and pointing to "ausreden[ree-10064,de].exe -l".
Shortcuts named "Animierte-Gifs.de animierte-gifs.lnk" and pointing to "animiertegifs[animierte-gifs,de].exe -l".
Shortcuts named "Hackercd-Online hcd-10240.lnk" and pointing to "security[hcd-10240,de].exe*".
Shortcuts named "P2P p2p-10253.lnk" and pointing to "p2p[p2p-10253,de].exe*".
Shortcuts named "testedich teh-10067.lnk" and pointing to "test[teh-10067,de,start4].exe*".
Shortcuts named "Linkrakete linkrakete.lnk" and pointing to "FREE-DOWNLOAD[linkrakete,de].exe*".
Shortcuts named "iqtest iqtest.lnk" and pointing to "*.exe*".
Shortcuts named "sendman D-1000.lnk" and pointing to "79.exe".
Shortcuts named "sendman D-1000.lnk" and pointing to "0157.exe".
Shortcuts named "sendman D-1000.lnk" and pointing to "0159.exe".
Shortcuts named "sendman D-1000.lnk" and pointing to "01505.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01511.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01520.exe -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0160.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "01566.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "0171.EXE -l".
Shortcuts named "sendman D-1000.lnk" and pointing to "664.EXE -l".
Shortcuts named "piratos p-11722.lnk" and pointing to "*.exe".
Shortcuts named "gedichte ged-10006.lnk" and pointing to "<$DESKTOP>".
Shortcuts named "vornamen vnn-10019.lnk" and pointing to "vornamen[vnn-10019,de].exe -l".
Shortcuts named "SMS-Stadt sst-11184.lnk" and pointing to "smsstadt[sst-11184,de].exe".
Shortcuts named "testedich testedich.lnk" and pointing to "test.exe".
Shortcuts named "Erotic-Master erotic-master.lnk" and pointing to "Erotic-Master[erotic-master,de].exe".
Shortcuts named "fun-movies fmv-10286.lnk" and pointing to "fun24[fmv-10286,de].exe".
Shortcuts named "Funnyserver fs-10757.lnk" and pointing to "FunFunFun[fs-10757,de].exe".
Shortcuts named "gifsworld gifsworld.lnk" and pointing to "gifsworld[gifsworld,de].exe".
Shortcuts named "gifsworld gwd-10005.lnk" and pointing to "gifsworld[gwd-10005,de].exe".
Shortcuts named "od-stnd224.lnk" and pointing to "od-stnd224.exe".
Shortcuts named "testedich teh-10067.lnk" and pointing to "test[teh-10067,de,start4].exe".
Shortcuts named "DIAET.AG deg-10129.lnk" and pointing to "abnehmen[deg-10129,de].exe".
Shortcuts named "bewerbe-dich bbh-10061.lnk" and pointing to "Bewerbung[bbh-10061,de].exe".
Shortcuts named "Liebesbriefe lbi-10016.lnk" and pointing to "BRIEFE[lbi-10016,de].exe".
Shortcuts named "cocktail-partys ccp-10097.lnk" and pointing to "cocktails[ccp-10097,de].exe".
Shortcuts named "Geburtstag grg-10097.lnk" and pointing to "geburtstag[grg-10097,de].exe".
Shortcuts named "gifsworld gwd-10927.lnk" and pointing to "gifsworld[gwd-10927,de].exe".
Shortcuts named "Hackerz hz-10046.lnk" and pointing to "Hackerz[hz-10046,de].exe".
Shortcuts named "Hausaufgaben hun-10222.lnk" and pointing to "hausaufgaben[hun-10222,de].exe".
Shortcuts named "Astrofieber.de aie-10070.lnk" and pointing to "Horoskop_erstellen[aie-10070,de].exe".
Shortcuts named "Liebesbriefe lbi-10023.lnk" and pointing to "Liebesbriefe[lbi-10023,de,start].exe".
Shortcuts named "iqtest itt-10528.lnk" and pointing to "IQTest[itt-10528,de].exe".
Shortcuts named "SMS-Stadt sst-11958.lnk" and pointing to "liebe[sst-11958,de].exe".
Shortcuts named "Gamer.AG geg-10001.lnk" and pointing to "spiele_runterladen[geg-10001,de].exe".
Shortcuts named "testedich teh-10116.lnk" and pointing to "test[teh-10116,de,start4].exe".
Shortcuts named "iqtest iqtest.lnk" and pointing to "illus.exe".
Shortcuts named "HIGHSPEED vip-10013.lnk" and pointing to "AdultCheck_GOLD_ID_Generator_v10_Crack.exe".
Shortcuts named "Linkrakete linkrakete.lnk" and pointing to "FREE-DOWNLOAD[linkrakete,de].exe".
Shortcuts named "Referate.de ref-10002.lnk" and pointing to "referate[ref-10002,de].exe".
Shortcuts named "SMS-Stadt sst-12754.lnk" and pointing to "SMS-Stadt[sst-12754,de].exe".
Shortcuts named "Referate ree-10323.lnk" and pointing to "spicktricks[ree-10323,de].exe".
Shortcuts named "tattooworld tod-10109.lnk" and pointing to "tattoos[tod-10109,de].exe".
Shortcuts named "Sternzeichen szn-10011.lnk" and pointing to "sternzeichen[szn-10011,de].exe".
Shortcuts named "Supergames srs-10001.lnk" and pointing to "installer[srs-10001,de].exe".
Shortcuts named "FastGame fte-10100.lnk" and pointing to "installer[fte-10100,de,16].exe".
Shortcuts named "XP-Antispy.de xp-antispy-de.lnk" and pointing to "XP-Antispy_de[xp-antispy-de,de].exe".
Shortcuts named "Pflanzen pla-10006.lnk" and pointing to "pflanzen[pla-10006,de].exe".
Shortcuts named "Lehrstellen lhs-10004.lnk" and pointing to "lehrstellen[lhs-10004,de].exe".
Shortcuts named "Hackz-Site hzs-10030.lnk" and pointing to "hzs-10030.exe".
Shortcuts named "Alle-Nackt ant-10102.lnk" and pointing to "Britney Spears Nackt.exe".
Shortcuts named "Celeb-Fakes cf-10109.lnk" and pointing to "britney_fuck.exe".
Shortcuts named "Celeb-Fakes cf-10109.lnk" and pointing to "lopez_blowjob[1].mpg.exe".
Shortcuts named "Gifsworld gwd-10425.lnk" and pointing to "gifsworld.exe".
Shortcuts named "Celeb-Fakes cf-10109.lnk" and pointing to "sarah_michelle_gellar_nude[1].avi.exe".
Shortcuts named "Hausaufgaben hun-10051.lnk" and pointing to "Hausaufgaben[hun-10051,de,1].exe".
Shortcuts named "Priggle pgg-10007.lnk" and pointing to "Priggle-pgg-10007.exe".
Shortcuts named "P2P p2p-10051.lnk" and pointing to "p2p-[p2p-10051,de].exe".
Shortcuts named "Intexus xp-antispy-de.lnk" and pointing to "XP-Antispy_de[xp-antispy-de,de].exe".
Shortcuts named "cheatspur chp-10022.lnk" and pointing to "cheats[chp-10022,de].exe".
Shortcuts named "Gamespur ger-10073.lnk" and pointing to "games[ger-10073,de].exe".
Shortcuts named "GamezAG gmz-10004.lnk" and pointing to "GamezAG[gmz-10004,de,lay1].exe".
Shortcuts named "Games-Archiv.com games-archiv-com.lnk" and pointing to "Games-Archiv[games-archiv-com,de].exe".
Shortcuts named "SMS-Chef smf-10006.lnk" and pointing to "SMS-Chef[smf-10006,de].exe".
Shortcuts named "Hausaufgaben hun-10002.lnk" and pointing to "hausaufgaben[hun-10002,de].exe".
Shortcuts named "loesungsbuch.de loesungsbuch-de.lnk" and pointing to "loesungsbuch[loesungsbuch-de,de].exe".
Shortcuts named "Brautberater.de bbr-10137.lnk" and pointing to "hochzeit[bbr-10137,de].exe".
Shortcuts named "P2P p2p-10111.lnk" and pointing to "p2p[p2p-10111,d].exe".
Shortcuts named "P2P p2p-10253.lnk" and pointing to "p2p[p2p-10253,de].exe".
Shortcuts named "Rauchen rcn-10001.lnk" and pointing to "rauchen[rcn-10001,de].exe".
Shortcuts named "Rauchen rcn-10001.lnk" and pointing to "rauchen[rcn-10001,de]_001.exe".
Shortcuts named "Kunst knt-10005.lnk" and pointing to "installer[knt-10005,de].exe".
Shortcuts named "P2P p2p-10074.lnk" and pointing to "installer[p2p-10074,de].exe".
Shortcuts named "P2P p2p-10078.lnk" and pointing to "installer[p2p-10078,de].exe".
Shortcuts named "SMS-Stadt sst-11958.lnk" and pointing to "installer[sst-11958,de].exe".
Shortcuts that include "iMeshV3.2.exe" in the target they point to.
Shortcuts that include "Dialer-RAS.D.gen.exe" in the target they point to.
Shortcuts that include "Piratos p-10325.exe" in the target they point to.
Shortcuts that include "erotikpalast.exe" in the target they point to.
Shortcuts that include "Seca 2 file downloader.exe" in the target they point to.
Shortcuts that include "sofortzugang.exe" in the target they point to.
Shortcuts that include "hacker-reporte.exe" in the target they point to.
Shortcuts that include "H-C-W-S.exe" in the target they point to.
Shortcuts that include "downloadtool.exe" in the target they point to.
Shortcuts that include "kontaktstudio24.exe" in the target they point to.
Shortcuts that include "sms-sprueche-archiv.exe" in the target they point to.
Shortcuts that include "encoder-crack.exe" in the target they point to.
Shortcuts that include "powerservertool.exe" in the target they point to.
Shortcuts that include "showtime.exe" in the target they point to.
Shortcuts that include "rottencom.exe" in the target they point to.
Shortcuts that include "hacking4life.exe" in the target they point to.
Shortcuts that include "brennsoftware.exe" in the target they point to.
Shortcuts that include "sicherheit.exe" in the target they point to.
Shortcuts that include "genialos.exe" in the target they point to.
Shortcuts that include "hackercd-online.exe" in the target they point to.
Shortcuts that include "stardialer.exe" in the target they point to.
Shortcuts that include "security.exe" in the target they point to.
Shortcuts that include "security-portal-zugang.exe" in the target they point to.
Shortcuts that include "funworld.exe" in the target they point to.
Shortcuts that include "girlscam.exe" in the target they point to.
Shortcuts that include "handy6.exe" in the target they point to.
Shortcuts that include "\virus scannersr.exe" in the target they point to.
Shortcuts that include "CBS_Direkt.exe" in the target they point to.
Shortcuts that include "\downloadserver.exe" in the target they point to.
Shortcuts that include "\downloadtool2.exe" in the target they point to.
Shortcuts that include "\filmstart.exe" in the target they point to.
Shortcuts that include "\Gratis-Sex-Crack.exe" in the target they point to.
Shortcuts that include "\sexcrackdialer.exe" in the target they point to.
Shortcuts that include "\live-flirtline.exe" in the target they point to.
Shortcuts that include "\virenschutz.exe" in the target they point to.
Shortcuts that include "geil.exe" in the target they point to.
Shortcuts that include "Hacker Spider.exe" in the target they point to.
Shortcuts that include "hacker-reporte.exe" in the target they point to.
Shortcuts that include "Outdoor.exe" in the target they point to.
Shortcuts that include "SMS_PlugIn.exe" in the target they point to.
Shortcuts that include "virus scannersr.exe" in the target they point to.
Shortcuts that include "suoneria8.exe" in the target they point to.
Start Menu:
Please remove the following items from your start menu.
To check where they are pointing to, right-click them and choose "Properties" from the context menu appearing.
Groups that have "- Celeb-Fakes -" in their name.
Groups that have "- Gifsworld -" in their name.
Items named "P2P p2p-10078.lnk" and pointing to "installer[p2p-10078,de].exe".
Groups named "- Prodialer -".
Items that include "iMeshV3.2.exe" in the target they point to.
Items that include "Dialer-RAS.D.gen.exe" in the target they point to.
Items that include "Piratos p-10325.exe" in the target they point to.
Groups named "- Piratos -".
Groups named "- Erotikpalast -".
Groups named "- Hackersnake -".
Items that include "sofortzugang.exe" in the target they point to.
Groups named "- sofortzugang -".
Items that include "hacker-reporte.exe" in the target they point to.
Items that include "H-C-W-S.exe" in the target they point to.
Groups named "- H-C-W-S -".
Items that include "downloadtool.exe" in the target they point to.
Groups named "- Warez Dealer Download Server -".
Items that include "kontaktstudio24.exe" in the target they point to.
Groups named "- Kontaktstudio24 -".
Items that include "sms-sprueche-archiv.exe" in the target they point to.
Groups named "- SMS-SPRUECHE-ARCHIV -".
Items that include "encoder-crack.exe" in the target they point to.
Groups named "- hackerag -".
Items that include "powerservertool.exe" in the target they point to.
Items that include "showtime.exe" in the target they point to.
Groups named "- rottencom -".
Groups named "- Onlinehacker -".
Groups named "- Hacker Spider -".
Groups named "- Genialos -".
Groups named "- Hackercd-Online -".
Items that include "stardialer.exe" in the target they point to.
Items that include "security.exe" in the target they point to.
Items that include "security-portal-zugang.exe" in the target they point to.
Groups named "- Funny -".
Groups named "- Girlscam -".
Groups named "- Handy6 -".
Items that include "handy6.exe" in the target they point to.
Groups named "- Key-DB -".
Groups named "- Erotik pur -".
Groups named "- Livesex -".
Groups named "- Live-Flirtline -".
Groups named "- Hobby-Hacker -".
Items that include "geil.exe" in the target they point to.
Items that include "Hacker Spider.exe" in the target they point to.
Groups named "- hacker-reporte -".
Items that include "hacker-reporte.exe" in the target they point to.
Groups named "- LiveShow -".
Items that include "Outdoor.exe" in the target they point to.
Groups named "- SMS-Versand -".
Items that include "SMS_PlugIn.exe" in the target they point to.
Items that include "virus scannersr.exe" in the target they point to.
Items that include "suoneria8.exe" in the target they point to.
Files:
Please use Windows Explorer or another file manager of your choice to locate and delete these files.
A file with an unknown location named "word.doc".
A file with an unknown location named "ibsload.ocx".
A file with an unknown location named "installer[sst-11463,de].exe".
A file with an unknown location named "dialer_activex.ocx".
The file at "<$WINDIR>\gedichte[ggg-10003,de].exe".
A file with an unknown location named "gedichte[gdi-10046,de].exe".
A file with an unknown location named "schulstadt[sla-10367,de].exe".
A file with an unknown location named "sexsmilies[sexsmilies,de].exe".
A file with an unknown location named "hochzeit[hcg-10021,de,lay1].exe".
A file with an unknown location named "smilie-fabrik[smilie-fabrik,de].exe".
A file with an unknown location named "lebenslauf[lba-10001,de].exe".
A file with an unknown location named "azureus[p2p-10113,de].exe".
A file with an unknown location named "firewall[hcd-11563,de].exe".
A file with an unknown location named "SHOCKER[sor-10040,de].exe".
A file with an unknown location named "Explor.exe".
A file with an unknown location named "OD-TEEN203.EXE".
A file with an unknown location named "CleverCrackers[ccs-10007,en,ccs-10007.exe".
A file with an unknown location named "StarInstall[1].ocx".
A file with an unknown location named "feier[fir-10002,de].exe".
A file with an unknown location named "downloadserver.exe".
A file with an unknown location named "5a8ed794d89583d08.exe".
A file with an unknown location named "GO.exe".
A file with an unknown location named "Readme.txt".
The file at "<$WINDIR>\APPLOG\ASD.LGC".
A file with an unknown location named "Dialer.ocx".
A file with an unknown location named "PornstarNet[por-10171,de].exe".
A file with an unknown location named "PornstarNet por-10171.exe".
A file with an unknown location named "Witze[witzekontor-de,de].exe".
A file with an unknown location named "gameXXL[gamexxl-de,de].exe".
A file with an unknown location named "tattoo[toa-10044,de].exe".
A file with an unknown location named "hentai[hv-10248,de].exe".
A file with an unknown location named "abnehmen[deg-10019,de].exe".
A file with an unknown location named "adultporn-tv[apv-10036,de].exe".
A file with an unknown location named "Alternativheilung[ahm-10001,de].exe".
A file with an unknown location named "boysline[bl-10551,de].exe".
A file with an unknown location named "castingtipps[cns-10066,de].exe".
A file with an unknown location named "CelebritySkin[cbs-10105,de].exe".
A file with an unknown location named "cheats[chp-10088,de].exe".
A file with an unknown location named "Cheats[csg-10096,de].exe".
A file with an unknown location named "funkings[fun-10213,de].exe".
A file with an unknown location named "funnyworld[fyd-10244,de,2-0].exe".
A file with an unknown location named "gifsworld[gwd-10728,de].exe".
A file with an unknown location named "games[ger-10460,de].exe".
A file with an unknown location named "game-spider[gamespider,de].exe".
A file with an unknown location named "grusskarte4u[g4u-10051,de].exe".
A file with an unknown location named "grusskarten[gag-10082,de].exe".
A file with an unknown location named "HaiAlarm[bre-10001,de].exe".
A file with an unknown location named "Individuell-Abnehmen[iln-10005,de,01].exe".
A file with an unknown location named "jungeboys[jgb-10083,de].exe".
A file with an unknown location named "Kasino[kng-10025,de].exe".
A file with an unknown location named "kontaktanzeigen[kan-10777,de].exe".
A file with an unknown location named "Liebesbriefe[lbi-10027,de].exe".
A file with an unknown location named "logoalarm[lam-11437,de].exe".
A file with an unknown location named "Probendatenbank[pcm-10100,de].exe".
A file with an unknown location named "Smiley[syc-10030,de].exe".
A file with an unknown location named "SMS-Fun[sud-10135,de].exe".
A file with an unknown location named "smsstadt[sst-11022,de].exe".
A file with an unknown location named "sternzeichen[szn-10020,de].exe".
A file with an unknown location named "tattoos[tod-10013,de].exe".
A file with an unknown location named "zaubertricks[zre-10084,de,l-1].exe".
A file with an unknown location named "Witzealarm[waa-10011,de].exe".
A file with an unknown location named "SMS-SPIDER[ssp-10106,de].exe".
A file with an unknown location named "Tangafun[tgn-10033,de].exe".
A file with an unknown location named "StarsNackt[ssf-10476,de].exe".
A file with an unknown location named "smsmanager[swr-10136,de].exe".
A file with an unknown location named "Onlinehacker[oha-10269,de].exe".
A file with an unknown location named "p2p[p2p-10280,de].exe".
A file with an unknown location named "Rezepte.exe".
A file with an unknown location named "flirty[fiy-10034,de].exe".
A file with an unknown location named "geniale-rezepte[grt-10006,de].exe".
A file with an unknown location named "geniale-rezepte[grt-10016,de].exe".
A file with an unknown location named "geschenkidee[gsi-10016,de].exe".
A file with an unknown location named "gifsworld[gwd-10461,de].exe".
A file with an unknown location named "hausaufgaben[hausaufgaben,de,SIDx_x2_hausaufgaben.com_pD9E3A279.dip.t-dialin.net_217.227.162.121].exe".
A file with an unknown location named "hochzeit[bbr-10015,de].exe".
A file with an unknown location named "Horoskop_erstellen[aie-10056,de].exe".
A file with an unknown location named "humor[hug-10053,de,9-0].exe".
A file with an unknown location named "loesungsbuch[lbu-10001,de,2514].exe".
A file with an unknown location named "vornamen[vnf-10033,de].exe".
A file with an unknown location named "VIDEO2[h2t-10062,de,10-0].exe".
A file with an unknown location named "tattoo-sex[tue-10004,de].exe".
A file with an unknown location named "spicker[spi-10016,de].exe".
A file with an unknown location named "songtextzone[xzo-10012,de].exe".
A file with an unknown location named "spass24[sp4-10279,de].exe".
A file with an unknown location named "SMS-Tool[met-10308,de].exe".
A file with an unknown location named "schulstadt[sla-10112,de].exe".
A file with an unknown location named "routenplaner[rai-10062,de].exe".
A file with an unknown location named "MobileGuru[mlu-10576,de].exe".
A file with an unknown location named "REZEPTE.EXE".
A file with an unknown location named "rezepte[ike-10025,de].exe".
A file with an unknown location named "modeberater[mbr-10038,de].exe".
A file with an unknown location named "megagif[maf-10416,de].exe".
A file with an unknown location named "Kochrezepte[kzc-10061,de].exe".
A file with an unknown location named "homepagevorlagen[mvn-10023,de].exe".
A file with an unknown location named "Bilderkiste_Fotos[bilderkiste-de,de].exe".
A file with an unknown location named "cheats[tc4-10049,de].exe".
A file with an unknown location named "GifProfi[gpi-10292,de].exe".
A file with an unknown location named "Gif-Seite[gse-10097,de].exe".
A file with an unknown location named "Hochzeit[htr-10014,de].exe".
A file with an unknown location named "MMSjack[mjk-10176,de].exe".
A file with an unknown location named "MP3-Legal[mll-10091,de].exe".
A file with an unknown location named "Quiz_starten[qne-10214,de].exe".
A file with an unknown location named "referate[loesungsbuch-com,de].exe".
A file with an unknown location named "SMS-Stadt[sst-11662,de].exe".
A file with an unknown location named "test[teh-10066,de,start4].exe".
A file with an unknown location named "Clipartland[cld-10179,de].exe".
A file with an unknown location named "Trilian.exe".
A file with an unknown location named "0157.exe".
A file with an unknown location named "664.exe".
A file with an unknown location named "01511.exe".
A file with an unknown location named "01520.exe".
A file with an unknown location named "01566.exe".
A file with an unknown location named "Hacker Spider.exe".
A file with an unknown location named "free-connector.exe".
A file with an unknown location named "Sicherheit.exe".
A file with an unknown location named "klingeltoene[sst-12804,de].exe".
A file with an unknown location named "smsstadt[sst-11958,de].exe".
A file with an unknown location named "smsstadt[sst-12560,de].exe".
A file with an unknown location named "ECARDS~1.EXE".
A file with an unknown location named "Aersche24[ahe-10013,de].EXE".
A file with an unknown location named "AnimeDesktop[adp-10083,de].exe".
A file with an unknown location named "ausreden[ree-10064,de].exe".
A file with an unknown location named "ANIMIE~1.EXE".
A file with an unknown location named "79.exe".
A file with an unknown location named "0159.exe".
A file with an unknown location named "01505.EXE".
A file with an unknown location named "0160.EXE".
A file with an unknown location named "0171.EXE".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$SYSDIR>\dialer_activex.ocx".
The file at "<$WINDIR>\Downloaded Program Files\dialer_activex.inf".
The file at "<$WINDIR>\Downloaded Program Files\dialer_activex.ocx".
The file at "<$WINDIR>\Downloaded Program Files\StarInstall.ocx".
A file with an unknown location named "gedichte[ged10006,de].exe".
A file with an unknown location named "vornamen[vnn-10019,de].exe".
A file with an unknown location named "smsstadt[sst-11184,de].exe".
A file with an unknown location named "test.exe".
A file with an unknown location named "Erotic-Master[erotic-master,de].exe".
A file with an unknown location named "fun24[fmv-10286,de].exe".
A file with an unknown location named "FunFunFun[fs-10757,de].exe".
A file with an unknown location named "gifsworld[gifsworld,de].exe".
A file with an unknown location named "gifsworld[gwd-10005,de].exe".
A file with an unknown location named "test[teh-10067,de,start4].exe".
A file with an unknown location named "abnehmen[deg-10129,de].exe".
A file with an unknown location named "Bewerbung[bbh-10061,de].exe".
A file with an unknown location named "BRIEFE[lbi-10016,de].exe".
A file with an unknown location named "cocktails[ccp-10097,de].exe".
A file with an unknown location named "geburtstag[grg-10097,de].exe".
A file with an unknown location named "gifsworld[gwd-10927,de].exe".
A file with an unknown location named "Hackerz[hz-10046,de].exe".
A file with an unknown location named "hausaufgaben[hun-10222,de].exe".
A file with an unknown location named "Horoskop_erstellen[aie-10070,de].exe".
A file with an unknown location named "Liebesbriefe[lbi-10023,de,start].exe".
A file with an unknown location named "IQTest[itt-10528,de].exe".
A file with an unknown location named "liebe[sst-11958,de].exe".
A file with an unknown location named "Klingeltoene[hpa-10336,de].exe".
A file with an unknown location named "test[teh-10116,de,start4].exe".
A file with an unknown location named "illus.exe".
A file with an unknown location named "AdultCheck_GOLD_ID_Generator_v10_Crack.exe".
A file with an unknown location named "FREE-DOWNLOAD[linkrakete,de].exe".
A file with an unknown location named "referate[ref-10002,de].exe".
A file with an unknown location named "installer[sst-11958,de].exe".
A file with an unknown location named "installer[p2p-10074,de].exe".
A file with an unknown location named "SMS-Stadt[sst-12754,de].exe".
A file with an unknown location named "spicktricks[ree-10323,de].exe".
A file with an unknown location named "tattoos[tod-10109,de].exe".
A file with an unknown location named "sternzeichen[szn-10011,de].exe".
A file with an unknown location named "installer[srs-10001,de].exe".
A file with an unknown location named "installer[fte-10100,de,16].exe".
A file with an unknown location named "hochzeit[bbr-10137,de].exe".
A file with an unknown location named "XP-Antispy_de[xp-antispy-de,de].exe".
A file with an unknown location named "pflanzen[pla-10006,de].exe".
A file with an unknown location named "lehrstellen[lhs-10004,de].exe".
A file with an unknown location named "hausaufgaben[hun-10002,de].exe".
A file with an unknown location named "hzs-10030.exe".
A file with an unknown location named "Britney Spears Nackt.exe".
A file with an unknown location named "britney_fuck.exe".
A file with an unknown location named "britney_nippleslip[1].avi.exe".
A file with an unknown location named "lopez_blowjob[1].mpg.exe".
A file with an unknown location named "gifsworld.exe".
A file with an unknown location named "sarah_michelle_gellar_nude[1].avi.exe".
A file with an unknown location named "Manga-Sex.exe".
A file with an unknown location named "Hausaufgaben[hun-10051,de,1].exe".
A file with an unknown location named "Priggle-pgg-10007.exe".
A file with an unknown location named "p2p-[p2p-10051,de].exe".
A file with an unknown location named "XP-Antispy_de[xp-antispy-de,de].exe".
A file with an unknown location named "cheats[chp-10022,de].exe".
A file with an unknown location named "games[ger-10073,de].exe".
A file with an unknown location named "GamezAG[gmz-10004,de,lay1].exe".
A file with an unknown location named "Games-Archiv[games-archiv-com,de].exe".
A file with an unknown location named "SMS-Chef[smf-10006,de].exe".
A file with an unknown location named "hausaufgaben[hun-10002,de]_001.exe".
A file with an unknown location named "hausaufgaben[hun-10002,de].exe".
A file with an unknown location named "loesungsbuch[loesungsbuch-de,de].exe".
A file with an unknown location named "p2p[p2p-10111,d].exe".
A file with an unknown location named "p2p[p2p-10253,de].exe".
A file with an unknown location named "rauchen[rcn-10001,de].exe".
A file with an unknown location named "rauchen[rcn-10001,de]_001.exe".
A file with an unknown location named "installer[knt-10005,de].exe".
A file with an unknown location named "iMeshV3.2.exe".
A file with an unknown location named "Dialer-RAS.D.gen.exe".
A file with an unknown location named "Piratos p-10325.exe".
A file with an unknown location named "erotikpalast.exe".
A file with an unknown location named "Seca 2 file downloader.exe".
A file with an unknown location named "sofortzugang.exe".
The file at "<$WINDIR>\hacker-reporte.exe".
The file at "<$SYSDIR>\hacker-reporte.exe".
A file with an unknown location named "H-C-W-S.exe".
The file at "<$WINDIR>\H-C-W-S.exe".
The file at "<$SYSDIR>\H-C-W-S.exe".
A file with an unknown location named "downloadtool.exe".
The file at "<$WINDIR>\downloadtool.exe".
The file at "<$SYSDIR>\downloadtool.exe".
A file with an unknown location named "kontaktstudio24.exe".
The file at "<$WINDIR>\kontaktstudio24.exe".
The file at "<$SYSDIR>\kontaktstudio24.exe".
A file with an unknown location named "sms-sprueche-archiv.exe".
The file at "<$WINDIR>\sms-sprueche-archiv.exe".
The file at "<$SYSDIR>\sms-sprueche-archiv.exe".
A file with an unknown location named "encoder-crack.exe".
The file at "<$WINDIR>\encoder-crack.exe".
The file at "<$SYSDIR>\encoder-crack.exe".
A file with an unknown location named "powerservertool.exe".
The file at "<$WINDIR>\powerservertool.exe".
The file at "<$SYSDIR>\powerservertool.exe".
A file with an unknown location named "showtime.exe".
The file at "<$WINDIR>\showtime.exe".
The file at "<$SYSDIR>\showtime.exe".
A file with an unknown location named "rottencom.exe".
A file with an unknown location named "hacking4life.exe".
A file with an unknown location named "brennsoftware.exe".
A file with an unknown location named "sicherheit.exe".
A file with an unknown location named "genialos.exe".
A file with an unknown location named "hackercd-online.exe".
A file with an unknown location named "stardialer.exe".
A file with an unknown location named "security.exe".
A file with an unknown location named "security-portal-zugang.exe".
A file with an unknown location named "funworld.exe".
A file with an unknown location named "girlscam.exe".
A file with an unknown location named "handy6.exe".
A file with an unknown location named "hacker-reporte.exe".
A file with an unknown location named "Hackers-FreiFick.exe".
A file with an unknown location named "CBS_Direkt.exe".
A file with an unknown location named "downloadtool2.exe".
A file with an unknown location named "filmstart.exe".
A file with an unknown location named "Gratis-Sex-Crack.exe".
A file with an unknown location named "sexcrackdialer.exe".
A file with an unknown location named "live-flirtline.exe".
A file with an unknown location named "virenschutz.exe".
A file with an unknown location named "geil.exe".
A file with an unknown location named "Hacker Spider.exe".
A file with an unknown location named "hacker-reporte.exe".
A file with an unknown location named "Outdoor.exe".
A file with an unknown location named "SMS_PlugIn.exe".
A file with an unknown location named "virus scannersr.exe".
A file with an unknown location named "suoneria8.exe".
The file at "<$WINDIR>\SUONERIA8.EXE".
Make sure you set your file manager to display hidden and system files. If MainPean uses rootkit technologies, use our RootAlyzer (http://forums.spybot.info/downloads.php?id=8) or our Total Commander anti-rootkit plugins (http://forums.spybot.info/downloads.php?id=3).
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!
Important: There are more files that cannot be safely described in simple words. Please use Spybot-S&D (http://www.safer-networking.org/index.php?page=spybotsd) to remove them.
Folders:
Please use Windows Explorer or another file manager of your choice to locate and delete these folders.
The directory at "<$PROGRAMS>\- Koch Ideen -".
The directory at "<$PROGRAMS>\- Gedichte.it -".
The directory at "<$PROGRAMS>\- gedicht -".
The directory at "<$PROGRAMS>\- SexSmilies -".
The directory at "<$PROGRAMS>\- Hochzeit.ag -".
The directory at "<$PROGRAMS>\- Smilie-Fabrik -".
The directory at "<$PROGRAMS>\- lebenslauf.de -".
The directory at "<$PROGRAMS>\- shocker -".
The directory at "<$PROGRAMS>\- CleverCrackers -".
The directory at "<$DIR_PROGGROUP>\- feier -".
The directory at "<$PROGRAMS>\- MonsterMMS -".
The directory at "<$PROGRAMS>\- PornstarNet -".
The directory at "<$PROGRAMS>\- Witzekontor.de - Einmal richtig ablachen -".
The directory at "<$PROGRAMS>\- gameXXL.de -".
The directory at "<$PROGRAMS>\- Tattoo Mania -".
The directory at "<$PROGRAMS>\- Hentai.tv -".
The directory at "<$PROGRAMS>\- adultporn.tv -".
The directory at "<$PROGRAMS>\- alternativ-heilung.com -".
The directory at "<$PROGRAMS>\- Boysline -".
The directory at "<$PROGRAMS>\- castingtipps -".
The directory at "<$PROGRAMS>\- CelebritySkin -".
The directory at "<$PROGRAMS>\- Cheats24.org -".
The directory at "<$PROGRAMS>\- FUNKINGS -".
The directory at "<$PROGRAMS>\- Funnyworld -".
The directory at "<$PROGRAMS>\- IntexusDial -".
The directory at "<$PROGRAMS>\- Flirty -".
The directory at "<$PROGRAMS>\- geniale-rezepte -".
The directory at "<$PROGRAMS>\- geschenkidee -".
The directory at "<$PROGRAMS>\- Hausaufgaben Direktzugang -".
The directory at "<$PROGRAMS>\- Humor.ag -".
The directory at "<$PROGRAMS>\- Vornamen-Fundus -".
The directory at "<$PROGRAMS>\- Humor24.net -".
The directory at "<$PROGRAMS>\- Tattootussis.de -".
The directory at "<$PROGRAMS>\- Spicken.info -".
The directory at "<$PROGRAMS>\- songtextzone -".
The directory at "<$PROGRAMS>\- Spass24 -".
The directory at "<$PROGRAMS>\- MobileTunes -".
The directory at "<$PROGRAMS>\- schulstadt -".
The directory at "<$PROGRAMS>\- Routenplaner.AG -".
The directory at "<$PROGRAMS>\- Routenplaner Profi -".
The directory at "<$PROGRAMS>\- MobileGuru -".
The directory at "<$PROGRAMS>\- Priggle -".
The directory at "<$PROGRAMS>\- ich-koche -".
The directory at "<$PROGRAMS>\- modeberater -".
The directory at "<$PROGRAMS>\- MegaGIF -".
The directory at "<$PROGRAMS>\- Kochrezepte.cc -".
The directory at "<$PROGRAMS>\- Monster Vorlagen -".
The directory at "<$PROGRAMS>\- Bilderkiste.de -".
The directory at "<$PROGRAMS>\- cheats.fm -".
The directory at "<$PROGRAMS>\- GifProfi -".
The directory at "<$PROGRAMS>\- gif-seite -".
The directory at "<$PROGRAMS>\- hochzeits-feier -".
The directory at "<$PROGRAMS>\- MMSjack -".
The directory at "<$PROGRAMS>\- MP3-Legal -".
The directory at "<$PROGRAMS>\- Quizrunden.de -".
The directory at "<$PROGRAMS>\- loesungsbuch.com -".
The directory at "<$PROGRAMS>\- Clipartland -".
The directory at "<$PROGRAMS>\- Trilian-de -".
The directory at "<$PROGRAMS>\- sendman -".
The directory at "<$PROGRAMS>\- HW-Setup -".
The directory at "- eCards -".
The directory at "<$PROGRAMS>\- Aersche24.de -".
The directory at "<$PROGRAMS>\- Animedesktop -".
The directory at "<$PROGRAMS>\- Animierte-Gifs.de -".
The directory at "<$WINDIR>\<$PROGRAMS>\- gedichte -".
The directory at "<$WINDIR>\<$PROGRAMS>\- vornamen -".
The directory at "<$PROGRAMS>\- testedich -".
The directory at "<$PROGRAMS>\- Erotic-Master -".
The directory at "<$PROGRAMS>\- fun-movies -".
The directory at "<$PROGRAMS>\- Funnyserver -".
The directory at "<$PROGRAMS>\- gifsworld -".
The directory at "<$PROGRAMS>\- DIAET.AG -".
The directory at "<$PROGRAMS>\- bewerbe-dich -".
The directory at "<$PROGRAMS>\- Liebesbriefe -".
The directory at "<$PROGRAMS>\- cocktail-partys -".
The directory at "<$PROGRAMS>\- Geburtstag -".
The directory at "<$PROGRAMS>\- Hackerz -".
The directory at "<$PROGRAMS>\- Astrofieber.de -".
The directory at "<$PROGRAMS>\- iqtest -".
The directory at "<$PROGRAMS>\- SMS-Stadt -".
The directory at "<$PROGRAMS>\- Gamer.AG -".
The directory at "<$PROGRAMS>\- HIGHSPEED -".
The directory at "<$PROGRAMS>\- Hausaufgaben -".
The directory at "<$PROGRAMS>\- Linkrakete -".
The directory at "<$PROGRAMS>\- Hackercd-Online -".
The directory at "<$PROGRAMS>\- Referate.de -".
The directory at "<$PROGRAMS>\- Referate -".
The directory at "<$PROGRAMS>\- tattooworld -".
The directory at "<$PROGRAMS>\- Sternzeichen -".
The directory at "<$PROGRAMS>\- Supergames -".
The directory at "<$PROGRAMS>\- FastGame -".
The directory at "<$PROGRAMS>\- XP-Antispy.de -".
The directory at "<$PROGRAMS>\- Pflanzen -".
The directory at "<$PROGRAMS>\- Lehrstellen -".
The directory at "<$PROGRAMS>\- Hackz-Site -".
The directory at "<$PROGRAMS>\- Alle-Nackt -".
The directory at "<$PROGRAMS>\- Manga-Sex -".
The directory at "<$PROGRAMS>\- Intexus -".
The directory at "<$PROGRAMS>\- cheatspur -".
The directory at "<$PROGRAMS>\- Gamespur -".
The directory at "<$PROGRAMS>\- GamezAG -".
The directory at "<$PROGRAMS>\- Games-Archiv.com -".
The directory at "<$PROGRAMS>\- SMS-Chef -".
The directory at "<$PROGRAMS>\- loesungsbuch.de -".
The directory at "<$PROGRAMS>\- Brautberater.de -".
The directory at "<$PROGRAMS>\- Rauchen -".
The directory at "<$PROGRAMS>\- Kunst -".
The directory at "<$PROGRAMS>\- P2P -".
Make sure you set your file manager to display hidden and system files. If MainPean uses rootkit technologies, use our RootAlyzer (http://forums.spybot.info/downloads.php?id=8) or our Total Commander anti-rootkit plugins (http://forums.spybot.info/downloads.php?id=3).
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify folders!
Registry:
You can use regedit.exe (included in Windows) to locate and delete these registry entries.
Delete the registry key "{8702d9e1-890b-4bf2-a233-fa44e582b2de}" at "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\".
Delete the registry key "{d53b810f-6219-11d4-95b6-0040950375e7}" at "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\".
Delete the registry key "Best Porno Netzwerk" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "Best Porno Netzwerk" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "Porn1747275" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "Porn1747275" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
A key in HKEY_CLASSES_ROOT\ named "ACTIVEXDOWNLOAD.ActiveXDownloadCtrl.1", plus associated values.
Delete the registry key "{E0B795B4-FD95-4ABD-A375-27962EFCE8CF}" at "HKEY_CLASSES_ROOT\CLSID\".
A key in HKEY_CLASSES_ROOT\ named "DIALERACTIVEX.DialeractivexCtrl.1", plus associated values.
Delete the registry key "{D53B8112-6219-11D4-95B6-0040950375E7}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "{D53B8110-6219-11D4-95B6-0040950375E7}" at "HKEY_CLASSES_ROOT\Interface\".
Delete the registry key "{D53B810F-6219-11D4-95B6-0040950375E7}" at "HKEY_CLASSES_ROOT\TypeLib\".
Delete the registry key "HKEY_CLASSES_ROOT\CLSID\{D037F883-92C3-4F89-A302-C01127CF3C72}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "HKEY_CLASSES_ROOT\CLSID\{E0B795B4-FD95-4ABD-A375-27962EFCE8CF}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "HKEY_CLASSES_ROOT\Interface\{CD6B926C-903F-46A4-9C7D-F3839F081788}" at "HKEY_CLASSES_ROOT\TypeLib\".
Delete the registry key "{A30B0BEB-A992-4E4B-AF6E-EB9019C3E540}" at "HKEY_CLASSES_ROOT\TypeLib\".
Delete the registry key "{D53B810F-6219-11D4-95B6-0040950375E7}" at "HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\".
Delete the registry key "{D037F883-92C3-4F89-A302-C01127CF3C72}" at "HKEY_CLASSES_ROOT\CLSID\".
Delete the registry key "{B0CE21C5-6A79-45B7-AB9C-0008E75F2DBF}" at "HKEY_CLASSES_ROOT\Interface\".
Delete the registry key "{CD6B926C-903F-46A4-9C7D-F3839F081788}" at "HKEY_CLASSES_ROOT\Interface\".
Delete the registry key "IntexusDial" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "IntexusDial" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "IntexusDial" at "HKEY_LOCAL_MACHINE\Software\".
Delete the registry key "MainPean Highspeed" at "HKEY_LOCAL_MACHINE\Software\".
Delete the registry key "MainPean Highspeed" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "MainPean Highspeed" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "suoneria8" at "HKEY_CURRENT_USER\RemoteAccess\Profile\".
Delete the registry value "suoneria8" at "HKEY_CURRENT_USER\RemoteAccess\Addresses\".
Delete the registry key "SUONERIA8.EXE" at "HKEY_CURRENT_USER\Software\".
If MainPean uses rootkit technologies, use our RegAlyzer (http://www.safer-networking.org/index.php?page=regalyzer), RootAlyzer (http://forums.spybot.info/downloads.php?id=8) or our Total Commander anti-rootkit plugins (http://forums.spybot.info/downloads.php?id=3).
Browser:
The following browser plugins or items can either be removed directly in your browser, or through the help of e.g. Spybot-S&D (http://www.safer-networking.org/index.php?page=spybotsd) or RunAlyzer (http://www.safer-networking.org/index.php?page=runalyzer).
Look for ActiveX software installed from "http://stardialer.de/install/StarInstall.ocx".
Final Words:
If neither Spybot-S&D nor self help did resolve the issue or you would prefer one on one help,
Please read these instructions (http://forums.spybot.info/showthread.php?t=288) before requesting assistance,
Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a volunteer analyst will advise you as soon as available.