| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.OptionalWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.04.2014, 22:42
| #1 |
 |  u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Hallo liebe Helfer vom Trojanerboard, auf unserem PC hat sich vor wenigen Tagen wahrscheinlich mehrere Adwares und/oder Trojaner eingenistet, die ich nun mit eurer netten Hilfe beseitigen möchte. Symptome: Nervige Werbung im Browser, mehrere (!) nicht absichtlich installierte Programme, sich öffnende Browserfenster Nun die Scans: Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:21 on 07/04/2014 (Heidi und Kalle)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Heidi und Kalle (administrator) on HEIDIUNDKALLE on 07-04-2014 21:21:55
Running from C:\Users\Tobias\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(SANDBOXIE L.T.D) D:\Sandboxie\SbieSvc.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [avgnt] - D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-402407132-709534727-3866883504-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-402407132-709534727-3866883504-1000\...\Run: [SandboxieControl] - D:\Sandboxie\SbieCtrl.exe [765200 2012-12-16] (SANDBOXIE L.T.D)
HKU\S-1-5-21-402407132-709534727-3866883504-1000\...\Run: [Browser Infrastructure Helper] - C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe startup
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
Startup: C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,
FF Keyword.URL: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - D:\Wichtige Programme\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SmartSaver+ 8 - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com [2014-03-31]
FF Extension: MediaPlayerplus - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-03-31]
FF Extension: HQVid8 - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-03-31]
FF Extension: Quick Start - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\quick_start@gmail.com [2014-03-30]
FF Extension: Shopping Helper Smartbar - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\{1468a6d9-2c9f-08da-f054-52ccaec0312a} [2014-03-30]
FF HKLM\...\Firefox\Extensions: [{77BEC163-D389-42c1-91A4-C758846296A5}] - C:\Program Files\Video downloader\Firefox
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-12]
FF HKCU\...\Firefox\Extensions: [{5ae66703-77f8-4623-8c81-9ba769053c03}] - C:\Program Files (x86)\Re-markit Corp\158.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522912 2012-12-14] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [906464 2012-12-14] (pdfforge GbR)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-07 21:21 - 2014-04-07 21:22 - 00017309 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:21 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:38 - 2014-04-07 18:43 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:28 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Tuguu_SL
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\newplayer
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-04-02 20:32 - 2014-04-02 20:43 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\ProgramData\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:19 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-03-30 21:01 - 2014-03-30 21:01 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Tuguu_SL
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:58 - 2014-04-07 18:45 - 00000000 ____D () C:\ProgramData\WPM
2014-03-30 20:58 - 2014-04-07 18:42 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\SupTab
2014-03-30 20:57 - 2014-03-30 20:59 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-03-30 20:57 - 2014-03-30 20:57 - 00001087 _____ () C:\Users\Heidi und Kalle\Desktop\MyPC Backup.lnk
2014-03-30 20:57 - 2014-03-30 20:57 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-03-30 20:56 - 2014-04-07 18:42 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 20:56 - 2014-03-30 20:56 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-03-30 20:55 - 2014-03-30 20:55 - 00000000 _____ () C:\END
2014-03-29 23:35 - 2014-03-29 23:35 - 00000000 ____D () C:\Users\Heidi\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-30 20:55 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Users\Kalle\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:04 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:03 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-13 16:30 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 16:30 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 16:30 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 16:30 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 16:30 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 16:30 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 16:30 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 16:30 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 16:30 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:30 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 16:30 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 16:30 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 16:30 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 16:30 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 16:30 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 16:30 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 16:30 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 16:30 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 16:30 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 16:30 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:30 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 16:30 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
2014-03-08 15:44 - 2014-04-07 21:13 - 00005331 _____ () C:\Windows\setupact.log
2014-03-08 15:44 - 2014-03-08 15:44 - 00000000 _____ () C:\Windows\setuperr.log
==================== One Month Modified Files and Folders =======
2014-04-07 21:22 - 2014-04-07 21:21 - 00017309 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:21 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-07 21:21 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-07 21:21 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2009-07-14 19:58 - 00702962 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 21:19 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 21:19 - 2009-07-14 07:13 - 01629410 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 21:17 - 2012-12-21 21:29 - 01673489 _____ () C:\Windows\WindowsUpdate.log
2014-04-07 21:15 - 2013-07-14 22:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-07 21:13 - 2014-03-08 15:44 - 00005331 _____ () C:\Windows\setupact.log
2014-04-07 21:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-07 21:11 - 2013-07-14 22:43 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-07 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-07 20:44 - 2013-05-30 08:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-07 18:45 - 2014-03-30 20:58 - 00000000 ____D () C:\ProgramData\WPM
2014-04-07 18:45 - 2013-09-13 21:17 - 00599440 _____ () C:\Windows\PFRO.log
2014-04-07 18:43 - 2014-04-07 18:38 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:42 - 2014-03-30 20:58 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\SupTab
2014-04-07 18:42 - 2014-03-30 20:56 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage
2014-04-07 18:29 - 2014-04-07 21:19 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 18:29 - 2014-04-07 18:28 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Tuguu_SL
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\newplayer
2014-04-03 18:06 - 2013-07-14 22:43 - 00004124 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-03 18:06 - 2013-07-14 22:43 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:47 - 2012-12-29 21:59 - 00000000 ____D () C:\Users\Heidi
2014-04-02 20:43 - 2014-04-02 20:32 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-03-31 18:43 - 2013-06-17 09:44 - 00001474 _____ () C:\Windows\Sandboxie.ini
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\ProgramData\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:01 - 2014-03-30 21:01 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Tuguu_SL
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:59 - 2014-03-30 20:57 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-03-30 20:57 - 2014-03-30 20:57 - 00001087 _____ () C:\Users\Heidi und Kalle\Desktop\MyPC Backup.lnk
2014-03-30 20:57 - 2014-03-30 20:57 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-03-30 20:57 - 2012-12-21 21:35 - 00000000 ___RD () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 20:56 - 2014-03-30 20:56 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-03-30 20:56 - 2013-01-26 14:07 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Mozilla
2014-03-30 20:56 - 2013-01-22 21:21 - 00001375 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-30 20:56 - 2012-12-21 21:35 - 00001661 _____ () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-30 20:55 - 2014-03-30 20:55 - 00000000 _____ () C:\END
2014-03-30 20:55 - 2014-03-29 21:41 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\SearchProtect
2014-03-29 23:35 - 2014-03-29 23:35 - 00000000 ____D () C:\Users\Heidi\AppData\Local\SearchProtect
2014-03-29 23:33 - 2013-01-22 21:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 21:44 - 2012-12-29 22:53 - 00000000 ____D () C:\Users\Kalle\AppData\Local\VirtualStore
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Users\Kalle\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 21:35 - 2012-12-30 19:35 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Apple Computer
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:07 - 2014-03-29 17:04 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:07 - 2014-03-29 17:03 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-23 17:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-18 19:28 - 2013-08-15 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 19:26 - 2012-12-25 01:47 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-13 19:51 - 2009-07-14 06:45 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 19:18 - 2012-12-21 21:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-12 10:45 - 2013-05-30 08:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:44 - 2013-05-27 21:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:44 - 2013-05-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-09 13:01 - 2012-12-29 22:52 - 01602754 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
2014-03-09 08:26 - 2012-12-30 19:33 - 00000000 ____D () C:\ProgramData\Apple
2014-03-08 15:44 - 2014-03-08 15:44 - 00000000 _____ () C:\Windows\setuperr.log
Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Heidi\AppData\Local\Temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\BackupSetup.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\shelper.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Kalle\AppData\Local\Temp\avgnt.exe
C:\Users\Tobias\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-31 22:40
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Heidi und Kalle at 2014-04-07 21:22:49
Running from C:\Users\Tobias\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.3868 - CDBurnerXP)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version: - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version: - ) <==== ATTENTION
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.0.0.10960 - Landesfinanzdirektion Thüringen)
fotokasten comfort 5.0 (HKLM-x32\...\fotokasten comfort_is1) (Version: - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
Nero 9 Essentials (HKLM-x32\...\{f3c4baf4-c421-404a-a952-3544a9ff2dd3}) (Version: - Nero AG)
Nero BurnRights (x32 Version: 3.4.10.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.9.203 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.6.100 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.202 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.10.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.204 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.207 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.1.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Pazera Free MP4 to AVI Converter 1.8 (HKLM-x32\...\{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1) (Version: 1.8 - Pazera Jacek)
PDF Architect (HKLM-x32\...\{09531CAE-B186-49A9-B44F-C607CC54FA2A}) (Version: 1.0.51.8724 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Shopping Helper Smartbar Engine (HKCU\...\{8b79a4e6-a39e-4fc5-9941-b14c4587d008}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version: - Microsoft)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-05-17 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1E317513-2DC4-4D40-A8E0-9EAE849AC03C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {43E8A059-8009-4F52-8B91-2C8717DF3CD6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {B8E36164-724D-4848-874E-1DE2701AF14C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B961ACFB-A8CF-47A3-8B7E-6CA13C64DDDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {E5E4FAA3-0FCD-4D3B-B70F-1B480A88D51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-12-25 12:29 - 2012-09-19 19:17 - 00397088 _____ () D:\Wichtige Programme\Avira\AntiVir Desktop\sqlite3.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-29 17:48 - 2014-03-29 17:48 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "D:\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: WinampAgent => D:\winamp\winampa.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/07/2014 09:06:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Name des fehlerhaften Moduls: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Ausnahmecode: 0x40000015
Fehleroffset: 0x000a0940
ID des fehlerhaften Prozesses: 0x590
Startzeit der fehlerhaften Anwendung: 0xHelperService.exe0
Pfad der fehlerhaften Anwendung: HelperService.exe1
Pfad des fehlerhaften Moduls: HelperService.exe2
Berichtskennung: HelperService.exe3
Error: (04/07/2014 06:29:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x45f4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/07/2014 06:29:38 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x45f0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/07/2014 06:29:31 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x45a0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/06/2014 08:57:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0xc1e4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/06/2014 08:56:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x5688
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/06/2014 08:56:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x91bc
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/06/2014 08:56:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x8afc
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/06/2014 08:56:38 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0xc264
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
Error: (04/06/2014 08:51:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x84b0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3
System errors:
=============
Error: (04/07/2014 09:14:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/07/2014 09:14:22 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
Error: (04/07/2014 09:06:22 PM) (Source: Service Control Manager) (User: )
Description: Dienst "PDF Architect Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/07/2014 06:51:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/07/2014 06:51:08 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
Error: (04/07/2014 06:47:39 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Error: (04/07/2014 06:47:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/07/2014 06:47:02 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
Error: (04/07/2014 04:25:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (04/07/2014 04:25:49 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.
Microsoft Office Sessions:
=========================
Error: (04/07/2014 09:06:21 PM) (Source: Application Error)(User: )
Description: HelperService.exe1.0.0.150cb2eafHelperService.exe1.0.0.150cb2eaf40000015000a094059001cf528193091a0eC:\Program Files (x86)\PDF Architect\HelperService.exeC:\Program Files (x86)\PDF Architect\HelperService.exeb45a9531-be87-11e3-a789-4487fc8017a4
Error: (04/07/2014 06:29:41 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9545f401cf527e90c422bcC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dlld12cda46-be71-11e3-a772-4487fc8017a4
Error: (04/07/2014 06:29:38 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9545f001cf527e90c5f783C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dllcf8fed1a-be71-11e3-a772-4487fc8017a4
Error: (04/07/2014 06:29:31 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9545a001cf527e824ac8dbC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dllcb4450a0-be71-11e3-a772-4487fc8017a4
Error: (04/06/2014 08:57:02 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a95c1e401cf51c9fbd02f4bC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll3c78eb77-bdbd-11e3-9630-4487fc8017a4
Error: (04/06/2014 08:56:55 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a95568801cf51c9f88a42e2C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll383dc1c7-bdbd-11e3-9630-4487fc8017a4
Error: (04/06/2014 08:56:43 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9591bc01cf51c9f19ca16dC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll3148a629-bdbd-11e3-9630-4487fc8017a4
Error: (04/06/2014 08:56:41 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a958afc01cf51c9f16f6748C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll304f03ac-bdbd-11e3-9630-4487fc8017a4
Error: (04/06/2014 08:56:38 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a95c26401cf51c8e73f0eb1C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll2e0a33e9-bdbd-11e3-9630-4487fc8017a4
Error: (04/06/2014 08:51:37 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9584b001cf51c937baea4eC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll7b25c948-bdbc-11e3-9630-4487fc8017a4
CodeIntegrity Errors:
===================================
Date: 2013-05-17 11:18:44.527
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-05-17 11:18:44.464
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 34%
Total physical RAM: 3959.12 MB
Available physical RAM: 2595.04 MB
Total Pagefile: 7916.41 MB
Available Pagefile: 6254.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:48.74 GB) (Free:11.82 GB) NTFS
Drive d: (Programme) (Fixed) (Total:19.64 GB) (Free:15.38 GB) NTFS
Drive e: (Bilder) (Fixed) (Total:43.95 GB) (Free:6.14 GB) NTFS
Drive f: (Musik) (Fixed) (Total:19.53 GB) (Free:10.54 GB) NTFS
Drive g: (Daten) (Fixed) (Total:17.09 GB) (Free:15.91 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0007C83B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=81 GB) - (Type=OF Extended)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-07 22:16:57
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-4 HITACHI_HTS722016K9SA00 rev.DCDZC75A 149,05GB
Running: Gmer-19357.exe; Driver: C:\Users\CHRIST~1\AppData\Local\Temp\ufdyrkog.sys
---- Threads - GMER 2.1 ----
Thread C:\Windows\System32\svchost.exe [2852:1704] 000007feeda39688
---- EOF - GMER 2.1 ----
Der Scan von Windows Defender hat keine Fehler gemeldet. Malwarebytes hingegen meldet über beim normalen Scan über 1500 (!) infizierte Objekte: Datei zu groß, siehe Anhang Antivir: Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 7. April 2014 22:36
Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.
Lizenznehmer : Avira Antivirus Free
Seriennummer : 0000149996-AVHOE-0000001
Plattform : Windows 7 Professional
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : Heidi und Kalle
Computername : HEIDIUNDKALLE
Versionsinformationen:
BUILD.DAT : 14.0.3.350 56624 Bytes 25.02.2014 11:41:00
AVSCAN.EXE : 14.0.3.332 1058384 Bytes 20.02.2014 13:15:03
AVSCANRC.DLL : 14.0.2.292 62008 Bytes 18.02.2014 11:44:59
LUKE.DLL : 14.0.3.336 65616 Bytes 20.02.2014 13:15:04
AVSCPLR.DLL : 14.0.3.336 124496 Bytes 20.02.2014 13:15:03
AVREG.DLL : 14.0.3.336 250448 Bytes 20.02.2014 13:15:03
avlode.dll : 14.0.3.336 544848 Bytes 20.02.2014 13:15:03
avlode.rdf : 14.0.3.38 58680 Bytes 13.03.2014 14:27:26
VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 17:44:01
VBASE001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 17:43:10
VBASE002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 15:30:43
VBASE003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 13:18:55
VBASE004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 20:18:12
VBASE005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 17:44:21
VBASE006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 18:29:53
VBASE007.VDF : 7.11.139.39 2048 Bytes 27.03.2014 18:29:53
VBASE008.VDF : 7.11.139.40 2048 Bytes 27.03.2014 18:29:53
VBASE009.VDF : 7.11.139.41 2048 Bytes 27.03.2014 18:29:53
VBASE010.VDF : 7.11.139.42 2048 Bytes 27.03.2014 18:29:53
VBASE011.VDF : 7.11.139.43 2048 Bytes 27.03.2014 18:29:53
VBASE012.VDF : 7.11.139.44 2048 Bytes 27.03.2014 18:29:53
VBASE013.VDF : 7.11.139.45 2048 Bytes 27.03.2014 18:29:53
VBASE014.VDF : 7.11.139.171 111104 Bytes 28.03.2014 16:30:23
VBASE015.VDF : 7.11.140.23 150016 Bytes 30.03.2014 18:41:15
VBASE016.VDF : 7.11.140.143 222720 Bytes 01.04.2014 17:51:11
VBASE017.VDF : 7.11.140.235 144384 Bytes 03.04.2014 15:39:09
VBASE018.VDF : 7.11.141.81 193536 Bytes 05.04.2014 11:44:33
VBASE019.VDF : 7.11.141.82 2048 Bytes 05.04.2014 11:44:33
VBASE020.VDF : 7.11.141.83 2048 Bytes 05.04.2014 11:44:33
VBASE021.VDF : 7.11.141.84 2048 Bytes 05.04.2014 11:44:33
VBASE022.VDF : 7.11.141.85 2048 Bytes 05.04.2014 11:44:33
VBASE023.VDF : 7.11.141.86 2048 Bytes 05.04.2014 11:44:33
VBASE024.VDF : 7.11.141.87 2048 Bytes 05.04.2014 11:44:33
VBASE025.VDF : 7.11.141.88 2048 Bytes 05.04.2014 11:44:34
VBASE026.VDF : 7.11.141.89 2048 Bytes 05.04.2014 11:44:34
VBASE027.VDF : 7.11.141.90 2048 Bytes 05.04.2014 11:44:34
VBASE028.VDF : 7.11.141.91 2048 Bytes 05.04.2014 11:44:34
VBASE029.VDF : 7.11.141.92 2048 Bytes 05.04.2014 11:44:34
VBASE030.VDF : 7.11.141.93 2048 Bytes 05.04.2014 11:44:34
VBASE031.VDF : 7.11.141.176 219136 Bytes 07.04.2014 14:30:25
Engineversion : 8.3.18.2
AEVDF.DLL : 8.3.0.4 118976 Bytes 21.03.2014 16:42:04
AESCRIPT.DLL : 8.1.4.198 528584 Bytes 28.03.2014 16:30:23
AESCN.DLL : 8.3.0.2 135360 Bytes 21.03.2014 16:42:04
AESBX.DLL : 8.2.20.6 1331575 Bytes 13.01.2014 17:54:21
AERDL.DLL : 8.2.0.138 704888 Bytes 02.12.2013 17:30:52
AEPACK.DLL : 8.4.0.16 778440 Bytes 02.04.2014 17:51:11
AEOFFICE.DLL : 8.3.0.2 201084 Bytes 13.03.2014 14:27:25
AEHEUR.DLL : 8.1.4.1004 6643912 Bytes 03.04.2014 15:39:08
AEHELP.DLL : 8.3.0.0 274808 Bytes 11.03.2014 19:40:37
AEGEN.DLL : 8.1.7.24 442743 Bytes 11.03.2014 19:40:36
AEEXP.DLL : 8.4.1.258 512376 Bytes 13.03.2014 14:27:26
AEEMU.DLL : 8.1.3.2 393587 Bytes 19.09.2012 13:42:55
AECORE.DLL : 8.3.0.6 241864 Bytes 19.03.2014 17:34:12
AEBB.DLL : 8.1.1.4 53619 Bytes 05.11.2012 14:00:38
AVWINLL.DLL : 14.0.3.252 23608 Bytes 20.02.2014 13:15:03
AVPREF.DLL : 14.0.3.252 48696 Bytes 20.02.2014 13:15:03
AVREP.DLL : 14.0.3.252 175672 Bytes 20.02.2014 13:15:03
AVARKT.DLL : 14.0.3.336 256080 Bytes 20.02.2014 13:15:03
AVEVTLOG.DLL : 14.0.3.336 165968 Bytes 20.02.2014 13:15:03
SQLITE3.DLL : 3.7.0.1 397088 Bytes 19.09.2012 17:17:40
AVSMTP.DLL : 14.0.3.252 60472 Bytes 20.02.2014 13:15:03
NETNT.DLL : 14.0.3.252 13368 Bytes 20.02.2014 13:15:04
RCIMAGE.DLL : 14.0.3.260 4979256 Bytes 20.02.2014 13:15:03
RCTEXT.DLL : 14.0.3.282 72760 Bytes 20.02.2014 13:15:03
Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Lokale Laufwerke
Konfigurationsdatei...................: D:\Wichtige Programme\Avira\AntiVir Desktop\alldrives.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:, E:, F:, G:, W:, X:, Y:, Z:, H:,
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: Vollständig
Abweichende Gefahrenkategorien........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Beginn des Suchlaufs: Montag, 7. April 2014 22:36
Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:, E:, F:, G:)'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'HDD1(W:)'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'HDD2(X:)'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'HDD3(Y:)'
[INFO] Es wurde kein Virus gefunden!
Bootsektor 'HDD4(Z:)'
[INFO] Es wurde kein Virus gefunden!
Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '152' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'SbieSvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '85' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'BackupStack.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'NBService.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'HelperService.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'ConversionService.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '228' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '118' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '115' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '30' Modul(e) wurden durchsucht
Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '4149' Dateien ).
Der Suchlauf über die ausgewählten Dateien wird begonnen:
Beginne mit der Suche in 'C:\'
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\setup.exe
[0] Archivtyp: NSIS
--> [PluginsDir]/WrapperUtils.dll
[FUND] Enthält Erkennungsmuster der Adware ADWARE/Agent.71168
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
Beginne mit der Suche in 'D:\' <Programme>
Beginne mit der Suche in 'E:\' <Bilder>
Beginne mit der Suche in 'F:\' <Musik>
Beginne mit der Suche in 'G:\' <Daten>
Beginne mit der Suche in 'W:\'
Der zu durchsuchende Pfad W:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'X:\'
Der zu durchsuchende Pfad X:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'Y:\'
Der zu durchsuchende Pfad Y:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'Z:\'
Der zu durchsuchende Pfad Z:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'H:\'
Der zu durchsuchende Pfad H:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Desinfektion:
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\setup.exe
[FUND] Enthält Erkennungsmuster der Adware ADWARE/Agent.71168
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5555b692.qua' verschoben!
Ende des Suchlaufs: Montag, 7. April 2014 23:36
Benötigte Zeit: 59:45 Minute(n)
Der Suchlauf wurde vollständig durchgeführt.
36189 Verzeichnisse wurden überprüft
501475 Dateien wurden geprüft
1 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
501474 Dateien ohne Befall
5605 Archive wurden durchsucht
1 Warnungen
1 Hinweise
Ich würde mich sehr über eure Hilfe freuen  Viele Grüße und einen schönen Abend, chris0806 |
|
08.04.2014, 00:11
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Hi,
__________________die Logs von Malwarebytes bitte direkt in CODE-Tags posten  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
08.04.2014, 06:17
| #3 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Hallo lieber cosinus,
__________________danke für Deine Hilfe! Hier der Log, den ich wegen der maximalen Länge von 120.000 Zeichen pro Post auf zwei Posts aufteilen muss: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2014.04.07.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16521 Christoph :: HEIDIUNDKALLE [administrator] 07.04.2014 16:31:53 MBAM-log-2014-04-07 (18-19-16).txt Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 519156 Time elapsed: 1 hour(s), 13 minute(s), 5 second(s) Memory Processes Detected: 5 C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager) -> 1548 -> No action taken. C:\Program Files (x86)\LPT\srpts.exe (PUP.Optional.Linkury.A) -> 2916 -> No action taken. C:\Program Files\V-bates\ExtensionUpdaterService.exe (PUP.Optional.VbatesHelper.A) -> 3268 -> No action taken. C:\ProgramData\IePluginService\PluginService.exe (PUP.Optional.IePluginService.A) -> 1508 -> No action taken. C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe (PUP.Optional.ReMarkit.A) -> 1204 -> No action taken. Memory Modules Detected: 7 C:\Program Files (x86)\LPT\Smartbar.Common.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Communication.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srpt.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srptc.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\SupTab\DpInterface32.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\Re-markit Corp\Re-markit158.dll (PUP.Optional.ReMarkIt.A) -> No action taken. Registry Keys Detected: 59 HKLM\SYSTEM\CurrentControlSet\Services\Wpm (PUP.Optional.WpManager) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM (PUP.Optional.WpManager) -> No action taken. HKCR\CLSID\{11111111-1111-1111-1111-110411891126} (PUP.Optional.SmartSaver.A) -> No action taken. HKCR\TypeLib\{44444444-4444-4444-4444-440444894426} (PUP.Optional.SmartSaver.A) -> No action taken. HKCR\Interface\{55555555-5555-5555-5555-550455895526} (PUP.Optional.SmartSaver.A) -> No action taken. HKCR\CrossriderApp0048926.BHO.1 (PUP.Optional.SmartSaver.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411891126} (PUP.Optional.SmartSaver.A) -> No action taken. HKCR\CLSID\{11111111-1111-1111-1111-110511421146} (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKCR\TypeLib\{44444444-4444-4444-4444-440544424446} (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKCR\Interface\{55555555-5555-5555-5555-550555425546} (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKCR\CrossriderApp0054246.BHO.1 (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146} (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKCR\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> No action taken. HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D} (PUP.Optional.SupTab.A) -> No action taken. HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} (PUP.Optional.SupTab.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> No action taken. HKCR\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> No action taken. HKCR\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13} (PUP.Optional.VBates) -> No action taken. HKCR\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} (PUP.Optional.VBates) -> No action taken. HKCR\Extension.ExtensionHelperObject.1 (PUP.Optional.VBates) -> No action taken. HKCR\Extension.ExtensionHelperObject (PUP.Optional.VBates) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> No action taken. HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} (PUP.Optional.QuickShare.A) -> No action taken. HKCR\IESmartBar.BHO (PUP.Optional.QuickShare.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} (PUP.Optional.QuickShare.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\89e5787b-04b6-4eac-a003-2cc6d81fc47b (PUP.Optional.ReMarkIt.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKLM\SYSTEM\CurrentControlSet\Services\LPTSystemUpdater (PUP.Optional.Linkury.A) -> No action taken. HKLM\SYSTEM\CurrentControlSet\Services\V-bates Updater (PUP.Optional.VbatesHelper.A) -> No action taken. HKCR\CrossriderApp0048926.BHO (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0048926.Sandbox (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0048926.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0053172.BHO (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0053172.BHO.1 (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0053172.Sandbox (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0053172.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0054246.BHO (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0054246.Sandbox (PUP.Optional.CrossRider.A) -> No action taken. HKCR\CrossriderApp0054246.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken. HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> No action taken. HKCU\Software\AppDataLow\Software\HQVid8 (PUP.Optional.HQVid.A) -> No action taken. HKCU\Software\AppDataLow\Software\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKCU\Software\AppDataLow\Software\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken. HKLM\SOFTWARE\V-bates (PUP.Optional.VbatesHelper.A) -> No action taken. HKLM\SOFTWARE\InstalledBrowserExtensions\21636 (PUP.Optional.CrossRider.A) -> No action taken. HKLM\SOFTWARE\InstalledBrowserExtensions\26549 (PUP.Optional.CrossRider.A) -> No action taken. HKLM\SOFTWARE\InstalledBrowserExtensions\27058 (PUP.Optional.CrossRider.A) -> No action taken. HKLM\SYSTEM\CurrentControlSet\Services\IePluginService (PUP.Optional.IePluginService.A) -> No action taken. HKLM\SYSTEM\CurrentControlSet\Services\Re-markit (PUP.Optional.ReMarkit.A) -> No action taken. HKLM\Software\HQVid8 (PUP.Optional.HQVid.A) -> No action taken. HKLM\Software\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken. HKLM\Software\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken. HKLM\Software\webssearchesSoftware (PUP.Optional.WebsSearches.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken. HKCR\CLSID\{11111111-1111-1111-1111-110511311172} (PUP.Optional.HQVid.A) -> No action taken. HKCR\TypeLib\{44444444-4444-4444-4444-440544314472} (PUP.Optional.HQVid.A) -> No action taken. HKCR\Interface\{55555555-5555-5555-5555-550555315572} (PUP.Optional.HQVid.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311172} (PUP.Optional.HQVid.A) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQVid8 (PUP.Optional.HQVid.A) -> No action taken. Registry Values Detected: 8 HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Data: C:\Program Files\V-bates\Firefox -> No action taken. HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{77BEC163-D389-42c1-91A4-C758846296A5} (PUP.Optional.VideoDownloader.A) -> Data: -> No action taken. HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{77BEC163-D389-42c1-91A4-C758846296A5} (PUP.Optional.VideoDownloader.A) -> Data: C:\Program Files\Video downloader\Firefox -> No action taken. HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Data: -> No action taken. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings|ProxyServer (PUM.Bad.Proxy) -> Data: http=127.0.0.1:13828 -> No action taken. HKLM\SOFTWARE\Mozilla\Firefox\Extensions|quick_start@gmail.com (PUP.Optional.QuickStart.A) -> Data: C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\quick_start@gmail.com -> No action taken. HKLM\SYSTEM\CurrentControlSet\Services\LPTSystemUpdater|ImagePath (PUP.Optional.Linkury.A) -> Data: "C:\Program Files (x86)\LPT\srpts.exe" -> No action taken. HKLM\SYSTEM\CurrentControlSet\Services\Wpm|ImagePath (PUP.Optional.WpManager.A) -> Data: C:\ProgramData\WPM\wprotectmanager.exe -service -> No action taken. Registry Data Items Detected: 7 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.SupTab.A) -> Bad: (C:\PROGRA~2\SupTab\SEARCH~1.DLL) Good: () -> No action taken. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command| (PUP.Optional.WebsSearches.A) -> Bad: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://istart.webssearches.com/?type=sc&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (firefox.exe) -> No action taken. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command| (PUP.Optional.WebsSearches.A) -> Bad: ("C:\Program Files (x86)\Internet Explorer\iexplore.exe" hxxp://istart.webssearches.com/?type=sc&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (iexplore.exe) -> No action taken. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.WebsSearches.A) -> Bad: (hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}) Good: (www.google.com) -> No action taken. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.WebsSearches.A) -> Bad: (hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (www.google.com) -> No action taken. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl|Default (PUP.Optional.SnapDo.A) -> Bad: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}) Good: (www.google.com) -> No action taken. HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.WebsSearches.A) -> Bad: (hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (www.google.com) -> No action taken. Folders Detected: 86 C:\Program Files (x86)\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Resources (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Configs (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Resources (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\SupTab (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\en-US (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\es-419 (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\es-ES (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-BE (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-CA (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-CH (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-FR (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-LU (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\it-CH (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\it-IT (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\pl (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\pt-BR (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\ru (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\ru-MO (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\tr-TR (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\vi-VI (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\zh-CN (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\zh-TW (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files\V-bates (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content\libraries (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content\resources (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\locale (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\locale\en-US (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\skin (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\defaults (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\defaults\preferences (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\libraries (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\resources (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ar (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Configs (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\de (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\es (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\fr (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\he (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\it (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\nl (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\pt (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ru (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\tr (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\Configs (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Profiles (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\RollBack (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles (PUP.Optional.SmartBar.A) -> No action taken. C:\ProgramData\IePluginService (PUP.Optional.IePluginService.A) -> No action taken. C:\ProgramData\IePluginService\update (PUP.Optional.IePluginService.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\Re-markit Corp (PUP.Optional.ReMarkIt.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Roaming\webssearches (PUP.Optional.WebsSearches.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images (PUP.Optional.WebsSearches.A) -> No action taken. C:\Program Files (x86)\HQVid8 (PUP.Optional.HQVid.A) -> No action taken. Files Detected: 1402 C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho.dll (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho.dll (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files\V-bates\Extension32.dll (PUP.Optional.VBates) -> No action taken. C:\Program Files (x86)\HQVid8\utils.exe (PUP.Optional.CrossRider.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bg.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\utils.exe (PUP.Optional.CrossRider.A) -> No action taken. C:\Program Files (x86)\Re-markit Corp\ReMar.exe (PUP.Optional.AdLyrics.A) -> No action taken. C:\Program Files (x86)\Re-markit Corp\Uninstall.exe (PUP.Optional.ReMarkIt.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-2.exe (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-3.exe (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-4.exe (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-5.exe (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bg.exe (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-codedownloader.exe (PUP.Optional.SmartSaver.A) -> No action taken. C:\Program Files (x86)\SmartSaver+ 8\utils.exe (PUP.Optional.CrossRider.A) -> No action taken. C:\Program Files (x86)\SupTab\RSHP.exe (PUP.Optional.IEPluginService.A) -> No action taken. C:\Users\Heidi\Downloads\solitaire setup.exe (PUP.Optional.BundleInstaller.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XNW587V\spstub[1].exe (PUP.Optional.Conduit.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCOZOP27\sp-downloader[1].exe (PUP.Optional.Conduit.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HZTDKV20\SPSetup[1].exe (PUP.Optional.Conduit.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\nsdE6CC.exe (PUP.Optional.SearchProtect.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\nst2DDD.exe (PUP.Optional.SearchProtect.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\nstE3CF.exe (PUP.Optional.SearchProtect.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\nsy30BB.exe (PUP.Optional.SearchProtect.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\android.exe (Backdoor.Bot) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\spidentifierimpl.exe (PUP.Optional.Conduit.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\mediaplayerplus.exe (PUP.Optional.CrossRider.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\Re-markit_2040-2082.exe (PUP.Optional.ReMarkIt.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\tugs_webssearches.exe (PUP.Optional.SkyTech.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\VOPackage.exe (PUP.Optional.SilenceInstall) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\4fc0fcce-c7d6-4fdc-9aaa-b18f5c572be7\android.exe (Backdoor.Bot) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\android\android.exe (Backdoor.Bot) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\f53a40a2-762c-4173-b5d2-c40338dde320\android.exe (Backdoor.Bot) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\f53a40a2-762c-4173-b5d2-c40338dde320\software\ShoppinHelper2_Setup_2.exe (PUP.Optional.ShoppingHelper.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\alilog.dll (PUP.Optional.SkyTech.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\package1.zip (PUP.Optional.SkyTech.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\tmp\SupTab.exe (PUP.Optional.SupTab.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\tmp\wpm.exe (PUP.Optional.WpManager) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\nsyAF37\SpSetup.exe (PUP.Optional.Conduit.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\Installer.msi (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Roaming\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage\Uninstall.exe (PUP.Optional.SilenceInstall) -> No action taken. C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage\VOPackage.exe (PUP.Optional.SilenceInstall) -> No action taken. C:\Users\Kalle\Downloads\winamp563_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> No action taken. C:\Windows\Installer\280343.msi (PUP.Optional.SmartBar.A) -> No action taken. C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-1.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-1.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-2.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-3.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-4.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-5.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-1.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-2.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-3.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-4.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-5.job (PUP.Optional.CrossRider.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\background.html (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\54246.crx (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\54246.xpi (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus.ico (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\MediaPlayerplus\Uninstall.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken. C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml (PUP.Optional.WebsSearches.A) -> No action taken. C:\Windows\Tasks\Re-markit Update.job (PUP.Optional.ReMarkIt.A) -> No action taken. C:\Windows\Tasks\Re-markit_wd.job (PUP.Optional.ReMarkIt.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\PublisherSettings.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\FiddlerCore.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\HtmlAgilityPack.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\linmsl.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\LPTInstaller.msi (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Newtonsoft.Json.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Proxy.pac (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Common.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Communication.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Communication.NamedPipe.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyService.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Personalization.Common.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\sppsm.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\spusm.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srbs.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srbu.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\sreu.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srpdm.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srprl.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srpt.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srptc.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srptm.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srptm.exe.config (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\srut.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\UserSettings.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs\BrowserSettings.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs\LPTMapping.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs\Timers.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\LPT\Resources\LPT.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\PublisherSettings.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\FiddlerCore.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\HtmlAgilityPack.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\linmsl.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Newtonsoft.Json.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Proxy.pac (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Common.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Communication.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\sppsm.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\spusm.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srbs.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srbu.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\sreu.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srpdm.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srprl.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srpt.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srptc.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srptm.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srptm.exe.config (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srpts.exe (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\srut.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\System.Data.SQLite.dll (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\UserSettings.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Configs\LPTMapping.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Configs\Timers.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\LPT\Resources\LPT.xml (PUP.Optional.Linkury.A) -> No action taken. C:\Program Files (x86)\SupTab\install.data (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\DpInterface32.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\DpInterface64.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\DpInterfacef32.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\ient.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\SearchProtect32.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\SearchProtect64.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\SpAPPSv32.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\SpAPPSv64.dll (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\uninstall.exe (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\indexIE.html (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\indexIE8.html (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\style.css (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\ver.txt (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\default_logo.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\icon128.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\icon16.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\icon48.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\loading.gif (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\0.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\1.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\10.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\11.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\12.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\13.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\14.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\15.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\16.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\17.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\18.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\19.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\2.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\20.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\21.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\22.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\23.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\24.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\25.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\26.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\27.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\28.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\29.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\3.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\30.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\31.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\32.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\33.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\34.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\35.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\36.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\37.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\38.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\39.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\4.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\40.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\41.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\42.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\43.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\44.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\45.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\46.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\47.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\5.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\6.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\7.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\8.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\img\weather\9.png (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js\background.js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js\ga.js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js\jquery-base.js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js\js.js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\js\xagainit.js (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json (PUP.Optional.SupTab.A) -> No action taken. C:\Program Files\V-bates\source.crx (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\DGChrome.exe (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Extension64.dll (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\ExtensionUpdaterService.exe (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\InstallerHelper.dll (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\NMHClient.exe (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\NMHClient.json (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\PrefHelper.exe (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\unins000.dat (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\unins000.exe (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome.manifest (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\icon.png (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\install.rdf (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content\main.js (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content\main.xul (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content\libraries\DataExchangeScript.js (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\content\resources\LocalScript.js (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\locale\en-US\overlay.dtd (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\chrome\skin\overlay.css (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\Firefox\defaults\preferences\defaults.js (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\libraries\DataExchangeScript.js (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Program Files\V-bates\resources\LocalScript.js (PUP.Optional.VbatesHelper.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\GuidCreator.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\5tlstlf3.ico (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\Installer.exe.config (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioData.xml (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\TVData.xml (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1001276787.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1032580196.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1049633276.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1087330818.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\10910262.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1104610067.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1147580050.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1163213760.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1204718153.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\121835881.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\122472738.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1230328089.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1298762877.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1310107020.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1326063932.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1345014714.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1349390236.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1369710219.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1373235683.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1386532862.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1394199207.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1407761077.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1415894710.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1418938224.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1424569337.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1448618572.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1481822820.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1493636833.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1509927059.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1517724479.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\154459894.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\155412559.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1669310521.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1679097045.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\168641980.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1758576778.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1761620300.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1772830074.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\179336091.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1804880237.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1893260371.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1924605918.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1955680767.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2030579034.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2035413131.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2042360304.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2054100928.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2085154025.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2098956121.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2100782698.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2132085398.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2133340426.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2135235822.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2157068549.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2172383622.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2188799041.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2197254446.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2237253885.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2299189749.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2314318620.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2319664488.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2351760750.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2352788679.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2434806465.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2448178934.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2527570036.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2538377536.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2538400399.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2540923269.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2558778520.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2571747616.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2583444921.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2587409586.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2590608011.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2591439044.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2612287955.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2628037879.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2653061757.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2675558977.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2710200799.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\273527147.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2751319937.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2776020400.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2787724300.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2797249473.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2842060987.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\285939796.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2931527065.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2952973582.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2984351418.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3033724325.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3042219480.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3063365749.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3064150577.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3082581872.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\309514462.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3120382369.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3122142557.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3165264072.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3182409528.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3184054012.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3187131776.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\319401273.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3232831230.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3233771152.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3250796059.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3278133524.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3282864392.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3308340081.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3329535649.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\333136190.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3353459484.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3369034760.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3383800463.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3386776517.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3423014897.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3453891725.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3458352640.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3489211912.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3498988851.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3500507916.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\355292266.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3561459644.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3590131191.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3596627549.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3620542188.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3663645435.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3696038166.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3702168251.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3741228717.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3763336611.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3766425313.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3789643263.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3813878146.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3814325319.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3823133617.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3823177572.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3835949179.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3837055614.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3847014217.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3855687987.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3856427893.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3862616577.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3864747753.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3872957308.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3885036774.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3887458186.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3890543285.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3944243447.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3948768214.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3966688001.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3970689814.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3976347681.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3994114319.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\40007619.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4032896534.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4040521507.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4047869151.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4059135308.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4108659329.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4111842662.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4124855599.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4156122664.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4160168922.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4162666780.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4180019228.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\42509276.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4258041623.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\426489121.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4289669010.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\439796844.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\446498293.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\462705098.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\502425151.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\505295175.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\554680345.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\573901993.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\610494985.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\620039489.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\647184093.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\652777024.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\655303227.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\735399138.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\765389517.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\767227599.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\768979132.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\788754019.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\813749843.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\876609851.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\881006563.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\90069336.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\90299962.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\918057842.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\953710841.gif (PUP.Optional.SmartBar.A) -> No action taken. C:\ProgramData\IePluginService\PluginService.exe (PUP.Optional.IePluginService.A) -> No action taken. C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe (PUP.Optional.ReMarkit.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\BrowserHelper.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\BrowserHelper.exe.config (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ChromeHost.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\DomainBlackList.xml (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\FiddlerCore.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\HtmlAgilityPack.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\IEButton.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Interop.SHDocVw.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Interop.WMPLib.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\lrcnt.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Lrcnta.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\MACTrackBarLib.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.mshtml.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Common.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.ObjectBuilder.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\NDde.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Newtonsoft.Json.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ProductsRemovalTool.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Proxy.pac (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\RegAsm.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sb.host.json (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sgml.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sgmu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sidb.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\siem.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sipb.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sismlp.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Common.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Communication.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Communication.NamedPipe.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe.config (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Monetization.Proxy.ProxyRemover.exe (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Monetization.Proxy.ProxyService.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.Translations.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInstallationIcon.ico (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarShortcutIcon.ico (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.config (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\smta.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\smtu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spbe.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spbl.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sppsm.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spsm.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spusm.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srau.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srbhu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srbs.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srbu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sreu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srgu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srns.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srom.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srpdm.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srprl.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srpu.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srsbs.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srsbsau.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srsl.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sruhs.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srus.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srut.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\System.Data.SQLite.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.html (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\manifest.json (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.htm (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.html (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.html (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS\border.css (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-1.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-2.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-3.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fb.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fblike.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\gmail.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\google.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\googleplus.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-1.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-2.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-3.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\left.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-1.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-2.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-3.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\mgsplusvideo.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-1.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-2.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-3.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\pinit.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\right.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\searchBox.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-1.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-2.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-3.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\twitter.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-1.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-2.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-3.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\alxbl.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\BackPageRemove.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\defaultBlockList.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\documentEvents.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\externalJS.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\FBImagePreview.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\filters.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\generalBackButtonDetection.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\InternalJS.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\jquery-1.9.0.min.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\PluginWrapper.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\publisherDefinitions.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\ta.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\tabReload.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\TopFrameJS.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\trans.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper128.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper16.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper48.png (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome.manifest (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\install.rdf (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\BackPageRemove.js (PUP.Optional.SmartBar.A) -> No action taken. C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\externalJS.js (PUP.Optional.SmartBar.A) -> No action taken. |
|
08.04.2014, 06:20
| #4 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.OptionalCode:
ATTFilter C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FBImagePreview.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.css (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.xul (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\InternalJS.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\jquery-1.5.1.min.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\publisherDefinitions.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fb.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fblike.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\gmail.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\googleplus.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\left.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\mgsplusvideo.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\pinit.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\right.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\searchBox.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\twitter.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper128.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper16.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper_small.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\ISmartbarFireFoxRemotePlugin.xpt (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\Configs\UserInfo.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FD.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EAB.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\youtube.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\youtubehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\youtubepress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\spup.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Profiles\3C6BEA24-8B0E-4EDE-82EC-536F56750CD5.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\ProgramData\IePluginService\update\conf (PUP.Optional.IePluginService.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\48926.crx (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\48926.xpi (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\background.html (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8.ico (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\Uninstall.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\158.crx (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\158.dat (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\158.xpi (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\a.db (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\b.db (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.bin (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.dll (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.ini (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Sqlite3.dll (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\92.json (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\uninstallDlg.xml (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\UninstallManager.exe (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\bg1.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\button1.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\checked.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\close.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\min.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\Thumbs.db (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\unchecked.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Program Files (x86)\HQVid8\53172.crx (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\53172.xpi (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-2.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-3.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-4.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-5.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\background.html (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-bg.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-bho.dll (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-codedownloader.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8.ico (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\Uninstall.exe (PUP.Optional.HQVid.A) -> No action taken.
(end)
|
|
08.04.2014, 09:18
| #5 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.OptionalZitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.04.2014, 09:27
| #6 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Hallo lieber cosinus, ich habe die Version über das MSDNAA-Programm erhalten und der PC wird nicht gewerblich genutzt, sondern rein privat. Viele Grüße, chris |
|
08.04.2014, 09:38
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Ok. Dir ist aber auch klar, dass heute nicht nur Windows XP sondern auch Office 2003 stillgelegt wird? Danach bekommt man keine weiteren Updates mehr für Office 2003. Heißt also du müsstest sinnigerweise updaten oder zB zu LibreOffice wechseln. Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.04.2014, 10:22
| #8 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Danke cosinus, ja das Office 2003 Problem lösen wir durch - wahrscheinlich - einen Neuerwerb. Danke trotzdem für den Hinweis. AdwCleander: Code:
ATTFilter # AdwCleaner v3.023 - Bericht erstellt am 08/04/2014 um 10:59:46
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Christoph - HEIDIUNDKALLE
# Gestartet von : C:\Users\Christoph\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : BackupStack
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Activeris
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Local\Tuguu_SL
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Activeris
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
Ordner Gelöscht : C:\Users\Heidi\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Kalle\AppData\Local\NewPlayer
Ordner Gelöscht : C:\Users\Kalle\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Kalle\AppData\Local\Tuguu_SL
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\quick_start@gmail.com
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Datei Gelöscht : C:\Users\Heidi und Kalle\Desktop\MyPC Backup.lnk
Datei Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\343m8jo1.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\searchplugins\Web Search.xml
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{77BEC163-D389-42c1-91A4-C758846296A5}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Schlüssel Gelöscht : HKCU\Software\8578cddb669ec12
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422892226}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422246}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466896626}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422892226}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422246}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466896626}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\Video downloader
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Video downloader
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16521
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1453d99c025f4121b1477de51c4f9e07");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]
[ Datei : C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1451e333f6e614fec14d6c02ae8c1197");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]
[ Datei : C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\343m8jo1.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]
[ Datei : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1453c947733268c0eb29346628f21b1e");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]
[ Datei : C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\prefs.js ]
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "145145eaba17021dd2f08badcf7759b5");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_istart.webssearches.com", "not set");
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_search.snapdo.com", "not set");
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_whiteListSearch", "{\"isearch.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"se[...]
*************************
AdwCleaner[R0].txt - [15039 octets] - [08/04/2014 10:49:59]
AdwCleaner[S0].txt - [13878 octets] - [08/04/2014 10:59:46]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13939 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Christoph on 08.04.2014 at 11:04:37,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-402407132-709534727-3866883504-1003\Software\video downloader
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411891126}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511311172}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411891126}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511311172}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511421146}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"
~~~ FireFox
Emptied folder: C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3tl74osf.default\minidumps [11 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2014 at 11:10:04,76
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 26 days old and could be outdated)
Ran by Christoph (administrator) on HEIDIUNDKALLE on 08-04-2014 11:17:33
Running from C:\Users\Christoph\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(SANDBOXIE L.T.D) D:\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [avgnt] - D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA48B17742811CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - D:\Wichtige Programme\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HQVid8 - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-07]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-12]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522912 2012-12-14] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [906464 2012-12-14] (pdfforge GbR)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-08 11:17 - 2014-04-08 11:17 - 00031631 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:15 - 2014-04-08 11:17 - 00010991 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-08 11:10 - 2014-04-08 11:11 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 10:49 - 2014-04-08 11:00 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:18 - 2014-04-08 07:21 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 23:25 - 2014-04-07 23:40 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 22:07 - 2014-04-07 22:18 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 21:54 - 2014-04-07 22:16 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:45 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:22 - 2014-04-07 21:23 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:21 - 2014-04-08 11:17 - 00000000 ____D () C:\FRST
2014-04-07 21:21 - 2014-04-07 21:23 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:38 - 2014-04-07 18:43 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:28 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-04-02 20:32 - 2014-04-02 20:43 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:19 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:04 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:03 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-13 16:30 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 16:30 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 16:30 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 16:30 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 16:30 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 16:30 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 16:30 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 16:30 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 16:30 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:30 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 16:30 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 16:30 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 16:30 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 16:30 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 16:30 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 16:30 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 16:30 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 16:30 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 16:30 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 16:30 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:30 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 16:30 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
==================== One Month Modified Files and Folders =======
2014-04-08 11:17 - 2014-04-08 11:17 - 00031631 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:17 - 2014-04-08 11:15 - 00010991 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-08 11:17 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-08 11:16 - 2012-12-21 21:29 - 01720775 _____ () C:\Windows\WindowsUpdate.log
2014-04-08 11:14 - 2013-07-14 22:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-08 11:13 - 2014-03-08 15:44 - 00005667 _____ () C:\Windows\setupact.log
2014-04-08 11:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-08 11:12 - 2013-07-14 22:43 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-08 11:11 - 2014-04-08 11:10 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:09 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-08 11:09 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 11:00 - 2014-04-08 10:49 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:59 - 2013-01-22 21:21 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-08 10:59 - 2012-12-21 21:35 - 00000000 ___RD () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:21 - 2014-04-08 07:18 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-08 07:16 - 2009-07-14 19:58 - 00702962 _____ () C:\Windows\system32\perfh007.dat
2014-04-08 07:16 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-04-08 07:16 - 2009-07-14 07:13 - 01629474 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 23:44 - 2013-05-30 08:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-07 23:40 - 2014-04-07 23:25 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 22:18 - 2014-04-07 22:07 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 22:16 - 2014-04-07 21:54 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:23 - 2014-04-07 21:22 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:23 - 2014-04-07 21:21 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-07 18:45 - 2013-09-13 21:17 - 00599440 _____ () C:\Windows\PFRO.log
2014-04-07 18:43 - 2014-04-07 18:38 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:29 - 2014-04-07 21:19 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 18:29 - 2014-04-07 18:28 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 21:45 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-03 18:06 - 2013-07-14 22:43 - 00004124 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-03 18:06 - 2013-07-14 22:43 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:47 - 2012-12-29 21:59 - 00000000 ____D () C:\Users\Heidi
2014-04-02 20:43 - 2014-04-02 20:32 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-03-31 18:43 - 2013-06-17 09:44 - 00001474 _____ () C:\Windows\Sandboxie.ini
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 20:56 - 2013-01-26 14:07 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Mozilla
2014-03-30 20:56 - 2012-12-21 21:35 - 00001661 _____ () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-29 23:33 - 2013-01-22 21:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 21:44 - 2012-12-29 22:53 - 00000000 ____D () C:\Users\Kalle\AppData\Local\VirtualStore
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 21:35 - 2012-12-30 19:35 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Apple Computer
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:07 - 2014-03-29 17:04 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:07 - 2014-03-29 17:03 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-23 17:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-18 19:28 - 2013-08-15 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 19:26 - 2012-12-25 01:47 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-13 19:51 - 2009-07-14 06:45 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 19:18 - 2012-12-21 21:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-12 10:45 - 2013-05-30 08:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:44 - 2013-05-27 21:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:44 - 2013-05-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-09 13:01 - 2012-12-29 22:52 - 01602754 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
2014-03-09 08:26 - 2012-12-30 19:33 - 00000000 ____D () C:\ProgramData\Apple
Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\temp\avgnt.exe
C:\Users\Christoph\AppData\Local\temp\Quarantine.exe
C:\Users\Heidi\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\BackupSetup.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\shelper.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\vcredist_x64.exe
C:\Users\Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Tobias\AppData\Local\temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-31 22:40
==================== End Of Log ============================
--- --- --- und Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Christoph at 2014-04-08 11:17:54
Running from C:\Users\Christoph\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.3868 - CDBurnerXP)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version: - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version: - ) <==== ATTENTION
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.0.0.10960 - Landesfinanzdirektion Thüringen)
fotokasten comfort 5.0 (HKLM-x32\...\fotokasten comfort_is1) (Version: - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{f3c4baf4-c421-404a-a952-3544a9ff2dd3}) (Version: - Nero AG)
Nero BurnRights (x32 Version: 3.4.10.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.9.203 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.6.100 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.202 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.10.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.204 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.207 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.1.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Pazera Free MP4 to AVI Converter 1.8 (HKLM-x32\...\{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1) (Version: 1.8 - Pazera Jacek)
PDF Architect (HKLM-x32\...\{09531CAE-B186-49A9-B44F-C607CC54FA2A}) (Version: 1.0.51.8724 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version: - Microsoft)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
08-04-2014 08:50:46 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-05-17 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1E317513-2DC4-4D40-A8E0-9EAE849AC03C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {43E8A059-8009-4F52-8B91-2C8717DF3CD6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {B8E36164-724D-4848-874E-1DE2701AF14C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B961ACFB-A8CF-47A3-8B7E-6CA13C64DDDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {E5E4FAA3-0FCD-4D3B-B70F-1B480A88D51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-12-25 12:29 - 2012-09-19 19:17 - 00397088 _____ () D:\Wichtige Programme\Avira\AntiVir Desktop\sqlite3.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "D:\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: WinampAgent => D:\winamp\winampa.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/08/2014 11:15:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37
Name des fehlerhaften Moduls: xul.dll, Version: 28.0.0.5186, Zeitstempel: 0x53240e04
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00184729
ID des fehlerhaften Prozesses: 0xd6c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
System errors:
=============
Microsoft Office Sessions:
=========================
Error: (04/08/2014 11:15:37 AM) (Source: Application Error)(User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c000000500184729d6c01cf530af2a0ac21C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll585b13ce-befe-11e3-a7de-4487fc8017a4
CodeIntegrity Errors:
===================================
Date: 2013-05-17 11:18:44.527
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-05-17 11:18:44.464
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 31%
Total physical RAM: 3959.12 MB
Available physical RAM: 2727.71 MB
Total Pagefile: 7916.41 MB
Available Pagefile: 6506.5 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:48.74 GB) (Free:11.39 GB) NTFS
Drive d: (Programme) (Fixed) (Total:19.64 GB) (Free:15.38 GB) NTFS
Drive e: (Bilder) (Fixed) (Total:43.95 GB) (Free:6.14 GB) NTFS
Drive f: (Musik) (Fixed) (Total:19.53 GB) (Free:10.54 GB) NTFS
Drive g: (Daten) (Fixed) (Total:17.09 GB) (Free:15.91 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0007C83B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=81 GB) - (Type=OF Extended)
==================== End Of Log ============================
Vielen Dank und liebe Grüße, chris edit: Soll ich bei JRT noch auf "fix" gehen? Ich halte das Programm solange noch offen |
|
08.04.2014, 11:47
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
C:\PROGRA~2\SupTab
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
C:\Program Files (x86)\SmartSaver+ 8
C:\Program Files (x86)\HQVid8
C:\Program Files (x86)\MediaPlayerplus
C:\Program Files\V-bates
FF Extension: HQVid8 - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-07]
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.04.2014, 19:33
| #10 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Guten Abend Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Christoph at 2014-04-08 20:30:03 Run:1
Running from C:\Users\Christoph\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
C:\PROGRA~2\SupTab
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
C:\Program Files (x86)\SmartSaver+ 8
C:\Program Files (x86)\HQVid8
C:\Program Files (x86)\MediaPlayerplus
C:\Program Files\V-bates
FF Extension: HQVid8 - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-07]
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
*****************
"C:\\PROGRA~2\\SupTab\\SEARCH~2.DLL" => Value Data removed successfully.
"C:\PROGRA~2\SupTab" => File/Directory not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411891126} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411891126} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311172} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110511311172} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110511421146} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} => Key deleted successfully.
HKCR\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} => Key deleted successfully.
"C:\Program Files (x86)\SmartSaver+ 8" => File/Directory not found.
"C:\Program Files (x86)\HQVid8" => File/Directory not found.
"C:\Program Files (x86)\MediaPlayerplus" => File/Directory not found.
"C:\Program Files\V-bates" => File/Directory not found.
C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com => Moved successfully.
C:\ProgramData\PKP_DLes.DAT => Moved successfully.
C:\ProgramData\PKP_DLet.DAT => Moved successfully.
C:\ProgramData\PKP_DLev.DAT => Moved successfully.
The system needed a reboot.
==== End of Fixlog ====
Ich stelle es immer wieder zurück, aber wenn ich den Browser schließe und anschließend wieder öffne, kann er wieder keine Verbindung herststellen, weil er dies über einen Proxyserver tun will. Startseiten lassen sich auch nicht festlegen, sondern es wird jedesmal wieder auf die ursprüngliche von firefox resettet. Liebe Grüße Geändert von chris0806 (08.04.2014 um 19:46 Uhr) Grund: Grammatik |
|
09.04.2014, 12:00
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
11.04.2014, 17:59
| #12 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Hallo und einen schönen Freitag Abend, hier die FRST-logs: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 29 days old and could be outdated)
Ran by Christoph (administrator) on HEIDIUNDKALLE on 11-04-2014 18:52:19
Running from C:\Users\Christoph\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(SANDBOXIE L.T.D) D:\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [avgnt] - D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA48B17742811CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - D:\Wichtige Programme\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-12]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522912 2012-12-14] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [906464 2012-12-14] (pdfforge GbR)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-10 06:05 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-10 06:05 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-10 06:05 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-10 06:05 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 06:05 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 06:05 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 06:05 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 06:05 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 06:05 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 06:05 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-10 06:05 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-10 06:05 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 06:05 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 06:05 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 06:05 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 06:05 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 11:31 - 2014-04-08 11:31 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-08 11:18 - 2014-04-08 11:18 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition2.txt
2014-04-08 11:17 - 2014-04-08 11:18 - 00031819 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:17 - 2014-04-08 11:18 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition.txt
2014-04-08 11:15 - 2014-04-11 18:53 - 00010283 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-08 11:10 - 2014-04-08 11:11 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 10:49 - 2014-04-08 11:00 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:18 - 2014-04-08 07:21 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 23:25 - 2014-04-07 23:40 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 22:07 - 2014-04-07 22:18 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 21:54 - 2014-04-07 22:16 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:45 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:22 - 2014-04-07 21:23 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:21 - 2014-04-11 18:52 - 00000000 ____D () C:\FRST
2014-04-07 21:21 - 2014-04-07 21:23 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:38 - 2014-04-07 18:43 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:28 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-04-02 20:32 - 2014-04-02 20:43 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:19 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2014-04-08 20:31 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:04 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:03 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-13 16:30 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 16:30 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 16:30 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 16:30 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 16:30 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 16:30 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 16:30 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:30 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 16:30 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 16:30 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 16:30 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 16:30 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 16:30 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 16:30 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 16:30 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 16:30 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 16:30 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 16:30 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:30 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 16:30 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
==================== One Month Modified Files and Folders =======
2014-04-11 18:53 - 2014-04-08 11:15 - 00010283 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-11 18:52 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-11 18:50 - 2014-03-08 15:44 - 00007302 _____ () C:\Windows\setupact.log
2014-04-11 18:50 - 2013-07-14 22:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-11 18:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-11 16:51 - 2012-12-21 21:29 - 01201618 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 16:44 - 2013-05-30 08:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-11 16:18 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-11 16:18 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-10 21:11 - 2013-07-14 22:43 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-10 06:53 - 2009-07-14 04:34 - 00000499 _____ () C:\Windows\win.ini
2014-04-10 06:52 - 2013-08-15 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 06:52 - 2012-12-21 21:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 06:50 - 2012-12-25 01:47 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 19:08 - 2009-07-14 19:58 - 00702962 _____ () C:\Windows\system32\perfh007.dat
2014-04-09 19:08 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-04-09 19:08 - 2009-07-14 07:13 - 01629474 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-09 17:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 20:31 - 2014-03-30 20:56 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-08 20:30 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-04-08 11:31 - 2014-04-08 11:31 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-08 11:18 - 2014-04-08 11:18 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition2.txt
2014-04-08 11:18 - 2014-04-08 11:17 - 00031819 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:18 - 2014-04-08 11:17 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition.txt
2014-04-08 11:11 - 2014-04-08 11:10 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 11:00 - 2014-04-08 10:49 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:59 - 2013-01-22 21:21 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-08 10:59 - 2012-12-21 21:35 - 00000000 ___RD () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:21 - 2014-04-08 07:18 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-07 23:40 - 2014-04-07 23:25 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 22:18 - 2014-04-07 22:07 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 22:16 - 2014-04-07 21:54 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:23 - 2014-04-07 21:22 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:23 - 2014-04-07 21:21 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 18:45 - 2013-09-13 21:17 - 00599440 _____ () C:\Windows\PFRO.log
2014-04-07 18:43 - 2014-04-07 18:38 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:29 - 2014-04-07 21:19 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 18:29 - 2014-04-07 18:28 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 21:45 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-03 18:06 - 2013-07-14 22:43 - 00004124 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-03 18:06 - 2013-07-14 22:43 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:47 - 2012-12-29 21:59 - 00000000 ____D () C:\Users\Heidi
2014-04-02 20:43 - 2014-04-02 20:32 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-03-31 18:43 - 2013-06-17 09:44 - 00001474 _____ () C:\Windows\Sandboxie.ini
2014-03-31 03:16 - 2014-04-10 06:05 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-10 06:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-10 06:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-10 06:05 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2013-01-26 14:07 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Mozilla
2014-03-30 20:56 - 2012-12-21 21:35 - 00001661 _____ () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-29 23:33 - 2013-01-22 21:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 21:44 - 2012-12-29 22:53 - 00000000 ____D () C:\Users\Kalle\AppData\Local\VirtualStore
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 21:35 - 2012-12-30 19:35 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Apple Computer
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:07 - 2014-03-29 17:04 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:07 - 2014-03-29 17:03 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-23 17:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-13 19:51 - 2009-07-14 06:45 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 10:45 - 2013-05-30 08:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:44 - 2013-05-27 21:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:44 - 2013-05-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\temp\avgnt.exe
C:\Users\Christoph\AppData\Local\temp\Quarantine.exe
C:\Users\Heidi\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\BackupSetup.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\shelper.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\vcredist_x64.exe
C:\Users\Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Tobias\AppData\Local\temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-31 22:40
==================== End Of Log ============================
und Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Christoph at 2014-04-11 18:53:33
Running from C:\Users\Christoph\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.3868 - CDBurnerXP)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version: - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version: - ) <==== ATTENTION
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.0.0.10960 - Landesfinanzdirektion Thüringen)
fotokasten comfort 5.0 (HKLM-x32\...\fotokasten comfort_is1) (Version: - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{f3c4baf4-c421-404a-a952-3544a9ff2dd3}) (Version: - Nero AG)
Nero BurnRights (x32 Version: 3.4.10.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.9.203 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.6.100 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.202 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.10.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.204 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.207 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.1.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Pazera Free MP4 to AVI Converter 1.8 (HKLM-x32\...\{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1) (Version: 1.8 - Pazera Jacek)
PDF Architect (HKLM-x32\...\{09531CAE-B186-49A9-B44F-C607CC54FA2A}) (Version: 1.0.51.8724 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version: - Microsoft)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63 - Nullsoft, Inc)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
==================== Restore Points =========================
08-04-2014 08:50:46 Windows Update
10-04-2014 04:49:26 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-05-17 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1E317513-2DC4-4D40-A8E0-9EAE849AC03C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {43E8A059-8009-4F52-8B91-2C8717DF3CD6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {B8E36164-724D-4848-874E-1DE2701AF14C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B961ACFB-A8CF-47A3-8B7E-6CA13C64DDDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {E5E4FAA3-0FCD-4D3B-B70F-1B480A88D51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-12-25 12:29 - 2012-09-19 19:17 - 00397088 _____ () D:\Wichtige Programme\Avira\AntiVir Desktop\sqlite3.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "D:\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: WinampAgent => D:\winamp\winampa.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/08/2014 08:28:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Name des fehlerhaften Moduls: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Ausnahmecode: 0x40000015
Fehleroffset: 0x000a0940
ID des fehlerhaften Prozesses: 0x7b8
Startzeit der fehlerhaften Anwendung: 0xHelperService.exe0
Pfad der fehlerhaften Anwendung: HelperService.exe1
Pfad des fehlerhaften Moduls: HelperService.exe2
Berichtskennung: HelperService.exe3
Error: (04/08/2014 11:15:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37
Name des fehlerhaften Moduls: xul.dll, Version: 28.0.0.5186, Zeitstempel: 0x53240e04
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00184729
ID des fehlerhaften Prozesses: 0xd6c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
System errors:
=============
Error: (04/11/2014 06:51:18 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Error: (04/11/2014 01:16:16 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Error: (04/08/2014 08:28:47 PM) (Source: Service Control Manager) (User: )
Description: Dienst "PDF Architect Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (04/08/2014 08:23:41 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Microsoft Office Sessions:
=========================
Error: (04/08/2014 08:28:44 PM) (Source: Application Error)(User: )
Description: HelperService.exe1.0.0.150cb2eafHelperService.exe1.0.0.150cb2eaf40000015000a09407b801cf53579dcb123aC:\Program Files (x86)\PDF Architect\HelperService.exeC:\Program Files (x86)\PDF Architect\HelperService.exe9d8280be-bf4b-11e3-ab64-4487fc8017a4
Error: (04/08/2014 11:15:37 AM) (Source: Application Error)(User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c000000500184729d6c01cf530af2a0ac21C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll585b13ce-befe-11e3-a7de-4487fc8017a4
CodeIntegrity Errors:
===================================
Date: 2013-05-17 11:18:44.527
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-05-17 11:18:44.464
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 29%
Total physical RAM: 3959.12 MB
Available physical RAM: 2780.61 MB
Total Pagefile: 7916.41 MB
Available Pagefile: 6550.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:48.74 GB) (Free:10.14 GB) NTFS
Drive d: (Programme) (Fixed) (Total:19.64 GB) (Free:15.38 GB) NTFS
Drive e: (Bilder) (Fixed) (Total:43.95 GB) (Free:6.14 GB) NTFS
Drive f: (Musik) (Fixed) (Total:19.53 GB) (Free:10.54 GB) NTFS
Drive g: (Daten) (Fixed) (Total:17.09 GB) (Free:15.91 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0007C83B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=81 GB) - (Type=OF Extended)
==================== End Of Log ============================
Auffällig ist nur noch, dass extrem viel Werbung in den Browsern angezeigt wird, aber keine Pop-Ups. Habe im Moment kein Adblockplugin im Browser aktiviert, weil ich mir eingebildet habe, dass es im Moment zwecks der Diagnose so besser ist. Viele Grüße, chris |
|
11.04.2014, 20:03
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Okay, dann bitte Kontrollscans mit MBAM und ESET bitte: Downloade Dir bitte  Malwarebytes Anti-Malware
ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
12.04.2014, 19:00
| #14 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional Hallo lieber cosinus, könnte mich so über mich selbst ärgern: Habe bei dem ersten Scan mit Malwarebytes aus Versehen eine ältere Version (aber mit aktualisierter Datenbank) benutzt. Die aktuelle Version hat nochmal jede Menge Mist gefunden, so dass ich den Log auf mehrere Posts aufteilen muss. hier die Scans: Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 12.04.2014 Suchlauf-Zeit: 12:59:24 Logdatei: mbam.txt Administrator: Ja Version: 2.00.1.1004 Malware Datenbank: v2014.04.12.02 Rootkit Datenbank: v2014.03.27.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Chameleon: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Christoph Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 383055 Verstrichene Zeit: 35 Min, 16 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Shuriken: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 24 PUP.Optional.VBates, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, Löschen bei Neustart, [956b2ed201ff847cf2af5bb8a95933cd], PUP.Optional.VBates, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, Löschen bei Neustart, [956b2ed201ff847cf2af5bb8a95933cd], PUP.Optional.QuickShare.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Löschen bei Neustart, [c13f9e6217e9fd03376c40068d758080], PUP.Optional.QuickShare.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Löschen bei Neustart, [c13f9e6217e9fd03376c40068d758080], PUP.Optional.SupTab.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Löschen bei Neustart, [9b6590700000b24ed651c44e758d24dc], PUP.Optional.SupTab.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Löschen bei Neustart, [9b6590700000b24ed651c44e758d24dc], PUP.Optional.VbatesHelper.A, HKLM\SOFTWARE\V-bates, In Quarantäne, [ab55c13fcf311ae60c8b4335b64c8e72], PUP.Optional.HQVid.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [7f81d52b639d14ecccf13f27f909ce32], PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [000003fd36cab14f20e30465fe043bc5], PUP.Optional.SmartSaver.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [a060be42ec14b947358c056be81abf41], PUP.Optional.SmartBar, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarBackup, Löschen bei Neustart, [46bacd337987da264a72376ec93ae818], PUP.Optional.SmartBar, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarLog, Löschen bei Neustart, [59a7718f2bd503fda6158b1afd0652ae], PUP.Optional.CrossRider.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Löschen bei Neustart, [a759877953adf50bb704544d44bf6f91], PUP.Optional.HQVid.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [10f0d52bc73947b917a691d59a68a65a], PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [b050996733cd2bd57c87c1a8738ffa06], PUP.Optional.SmartSaver.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [cc34a45c38c80000a61b75fb8d75f709], PUP.Optional.CrossRider.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Löschen bei Neustart, [847c52ae837d728e2f8c1e8359aa4eb2], PUP.Optional.HQVid.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [f50b916ff40c8080ccf18fd7dd2530d0], PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [9c64e51b837d867a16ed5f0a6d95629e], PUP.Optional.SmartSaver.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [79878a766e925ba5942d4f21bb477090], PUP.Optional.BProtector.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\BPROTECTSETTINGS, Löschen bei Neustart, [df21d32dfd03c23ea3b9355b986bd030], PUP.Optional.HQVid.A, HKU\S-1-5-21-402407132-709534727-3866883504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [02feb0500cf4cb35714c43236d9518e8], PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-402407132-709534727-3866883504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [bb4535cbca3630d07f8420492ed41ae6], PUP.Optional.SmartSaver.A, HKU\S-1-5-21-402407132-709534727-3866883504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [9967a15fc739ca36b908dd935ea42bd5], Registrierungswerte: 5 PUM.Bad.Proxy, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, Löschen bei Neustart, [9b6506fafa0636ca54c265415ca71fe1] PUP.Optional.SmartBar.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Infrastructure Helper, C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe startup, Löschen bei Neustart, [dc248a76e21ef808636de1aaee15669a] PUP.Optional.ReMarkIT.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{5ae66703-77f8-4623-8c81-9ba769053c03}, C:\Program Files (x86)\Re-markit Corp\158.xpi, Löschen bei Neustart, [41bf9c64817f26da60cb283f659ddb25] PUP.BProtector, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Löschen bei Neustart, [da269c64ce32fd0322df7914fe057f81] PUM.Bad.Proxy, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, Löschen bei Neustart, [ea16a15f768aed1353c3dcca0201d927] Registrierungsdaten: 15 PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|CustomizeSearch, hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}),Ersetzt,[fe023cc4936d04fc483b7a9ba361c53b] PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}),Ersetzt,[d030768a13edfc04255ff421897b1de3] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[0af6fc048b7567991757001f25dfe11f] PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[738de21e42bef90727b7a07e41c3d729] PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFkVzMqCcxhlHKbI0wfcSFsxayc0RIW8Y7zFg-0sOD_Tp6ICQuH-n1YauH92qdMoUNkW-Osuw,,, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFkVzMqCcxhlHKbI0wfcSFsxayc0RIW8Y7zFg-0sOD_Tp6ICQuH-n1YauH92qdMoUNkW-Osuw,,),Löschen bei Neustart,[c63a53ad857b44bcd10ee13d06fed828] PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[966a699742be22de08d545d9e420b54b] PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[db256c94ac54b84822be6eb011f3a25e] PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[33cd38c8d12fad5334ad2cf233d131cf] PUP.Optional.SnapDo.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[8f71c23e0cf409f7caac859094703ac6] PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[a858dc24867a20e022bccb5324e0a55b] PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,),Löschen bei Neustart,[d42c15eb88788977fce3b66824e047b9] PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[27d96799dd23e11f9d40b7679a6a5ea2] PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[a060f10fd828c23e9e42e23c9f65de22] PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[936d738dc23e2ad6edf446d8aa5a0cf4] PUP.Optional.SnapDo.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[936d8c7421dfe818d1a5a86d46be5fa1] Ordner: 117 PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], Dateien: 926 PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome.manifest, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\install.rdf, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\background.html, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\baseObject.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\browser.xul, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\dialog.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\main.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.xul, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\platformVersion.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\search_dialog.xul, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\asyncDB.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\background.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\browserAction.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\contextMenu.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dbManager.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dom_bg.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\fileManager.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefox.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\message.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\pageAction.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\request.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\tabs.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\webRequest.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\console.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\consts.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\delegate.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\httpObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\installer.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\logFile.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\prefs.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\registry.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reloadObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reports.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\requestObject.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\searchSettings.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\updateManager.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\utils.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\xhr.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences\prefs.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\manifest.xml, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins.json, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\1.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\102.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\104.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\13.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\14.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\16.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\17.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\177.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\180.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\182.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\183.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\191.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\193.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\207.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\21.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\211.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\22.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\223.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\246.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\28.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\4.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\47.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\64.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\72.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\78.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\91.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\93.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\98.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\background.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\extension.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US\translations.dtd, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button1.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button2.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button3.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button4.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button5.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\crossrider_statusbar.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon128.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon16.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon24.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon48.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\panelarrow-up.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\popup.html, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\skin.css, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\update.css, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome.manifest, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\install.rdf, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\background.html, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\baseObject.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\browser.xul, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\dialog.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\main.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.xul, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\platformVersion.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\search_dialog.xul, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\asyncDB.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\background.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\browserAction.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\contextMenu.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dbManager.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dom_bg.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\fileManager.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefox.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\message.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\pageAction.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\request.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\tabs.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\webRequest.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\console.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\consts.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\delegate.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\httpObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\installer.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\logFile.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\prefs.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\registry.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reloadObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reports.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\requestObject.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\searchSettings.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\updateManager.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\utils.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\xhr.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences\prefs.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\manifest.xml, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins.json, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\1.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\102.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\103.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\104.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\13.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\14.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\155.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\16.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\17.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\177.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\182.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\183.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\184.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\190.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\191.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\195.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\207.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\21.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\211.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\22.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\220.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], |
|
12.04.2014, 19:01
| #15 |
| | u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.OptionalCode:
ATTFilter PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\233.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\242.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\246.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\28.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\4.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\47.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\64.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\7.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\72.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\78.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\9.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\91.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\93.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\98.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\background.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\extension.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US\translations.dtd, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button1.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button2.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button3.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button4.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button5.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\crossrider_statusbar.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon128.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon16.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon24.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon48.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\panelarrow-up.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\popup.html, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\skin.css, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\update.css, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome.manifest, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\install.rdf, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\background.html, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\baseObject.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\browser.xul, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\dialog.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\main.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.xul, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\platformVersion.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\search_dialog.xul, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\asyncDB.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\background.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\browserAction.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\contextMenu.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dbManager.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dom_bg.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\fileManager.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefox.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\message.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\pageAction.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\request.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\tabs.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\webRequest.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\console.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\consts.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\delegate.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\httpObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\installer.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\logFile.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\prefs.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\registry.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reloadObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reports.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\requestObject.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\searchSettings.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\updateManager.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\utils.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\xhr.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences\prefs.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\manifest.xml, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins.json, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\1.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\102.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\103.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\104.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\119.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\13.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\14.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\16.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\17.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\177.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\179.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\180.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\182.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\183.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\191.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\207.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\21.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\22.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\223.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\231.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\232.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\242.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\246.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\28.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\4.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\47.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\64.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\72.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\78.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\91.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\93.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\98.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode\background.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode\extension.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US\translations.dtd, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button1.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button2.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button3.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button4.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button5.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\crossrider_statusbar.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon128.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon16.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon24.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon48.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\panelarrow-up.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\popup.html, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\skin.css, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\update.css, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome.manifest, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\install.rdf, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\background.html, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\baseObject.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\browser.xul, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\dialog.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\main.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.xul, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\platformVersion.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\search_dialog.xul, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\asyncDB.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\background.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\browserAction.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\contextMenu.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dbManager.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dom_bg.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\fileManager.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefox.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\message.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\pageAction.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\request.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\tabs.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\webRequest.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\console.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\consts.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\delegate.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\httpObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\installer.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\logFile.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\prefs.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\registry.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reloadObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reports.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\requestObject.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\searchSettings.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\updateManager.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\utils.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\xhr.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences\prefs.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\manifest.xml, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins.json, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\1.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\102.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\104.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\13.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\14.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\16.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\17.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\177.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\180.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\182.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\183.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\191.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\193.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\207.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\21.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\211.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\22.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\223.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\246.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\28.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\4.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\47.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\64.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\72.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\78.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\91.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\93.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\98.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\background.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\extension.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US\translations.dtd, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button1.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button2.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button3.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button4.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button5.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\crossrider_statusbar.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon128.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon16.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon24.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon48.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\panelarrow-up.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\popup.html, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\skin.css, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\update.css, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome.manifest, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\install.rdf, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\background.html, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\baseObject.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\browser.xul, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\dialog.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\main.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.xul, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\platformVersion.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\search_dialog.xul, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\asyncDB.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\background.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\browserAction.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\contextMenu.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dbManager.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dom_bg.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\fileManager.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefox.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\message.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\pageAction.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\request.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\tabs.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\webRequest.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\console.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\consts.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\delegate.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\httpObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\installer.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\logFile.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\prefs.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\registry.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reloadObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reports.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\requestObject.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\searchSettings.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\updateManager.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\utils.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\xhr.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences\prefs.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\manifest.xml, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins.json, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\1.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\102.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\103.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\104.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\13.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\14.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\155.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\16.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\17.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\177.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\182.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\183.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\184.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\190.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\191.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\195.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\207.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\21.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\211.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\22.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\220.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\233.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\242.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\246.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\28.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\4.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\47.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\64.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\7.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\72.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\78.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\9.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\91.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\93.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\98.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\background.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\extension.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US\translations.dtd, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button1.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button2.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button3.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button4.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button5.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\crossrider_statusbar.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon128.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon16.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon24.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon48.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\panelarrow-up.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\popup.html, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\skin.css, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\update.css, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome.manifest, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\install.rdf, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\background.html, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\baseObject.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\browser.xul, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\dialog.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\main.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.xul, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\platformVersion.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\search_dialog.xul, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\asyncDB.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\background.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\browserAction.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\contextMenu.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dbManager.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dom_bg.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\fileManager.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefox.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\message.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\pageAction.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\request.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\tabs.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\webRequest.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\console.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\consts.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\delegate.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\httpObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\installer.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\logFile.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\prefs.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\registry.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reloadObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reports.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\requestObject.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\searchSettings.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\updateManager.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\utils.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\xhr.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences\prefs.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\manifest.xml, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins.json, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\1.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\102.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\103.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
|
|
