Win 8:(Popup) Werbung, blau unterstrichene Hypelinks und es öffnen sich ungefragt Tabs

Nathalie · 19.08.2014, 18:58

Guten Tag,

Seit einigen Tagen öffnen sich ungefragt Tabs mit Werbung, wo ich aufgefordert werde ein "Video- Performer update" durchzuführen oder "Google Chrome Videoplayer" ,"Java" oder eine "Windows Re-pair Programm" zu installieren. Außerdem sind auf den Seiten willkürlich Wörter blau gekennzeichnet und doppelt unterstrichen, diese führen zu Seiten die mein Google Chrome oder Adblock sperrt. Auf meinem PC läuft "Zonealarm" als Virenschutzprogramm und er meldet auch zwischendurch Malware, Trojaner oder Viren die er aber behandelt oder in Quarantäne setzt. Die Probleme bestehen trotzdem, obwohl es nichts mehr anzeigt.

Ich habe versucht den Defogger zu downloaden, dies war mir nicht möglich da der Download Button auch doppelt unterstrichen war (blau markiert) und beim anklicken sich ein weiterer Virus heruntergeladen hat. "Zonealarm" hat ihn behandelt.

Beim Download von FRST erging es mir nicht anders, ich wurde auf eine andere Seite weitergeleitet, die "Google Chrome" geblockt hat mit dem Hinweis " Chrome meldet: Vorsicht Phisching Website".

Ich habe extern die Programme heruntergeladen und dann die Logfiles erstellt.

Zusätzlich habe ich "Malwarebytes Anti-Rootkit" über den Pc laufen lassen, er hat eine Maleware gefunden und bereinigt, bei dem zweiten Durchlauf war er sauber. Den Scan mit DMER konnte ich nicht ausführen.

Im Anhang füge ich auch die Protokolle von "Zone Alarm" hinzu.

Danke schonmal im Vorraus für Ihre Mühe!

Liebe Grüße
Nathalie

schrauber · 19.08.2014, 19:37

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Nathalie · 19.08.2014, 19:58

Entschuldigung, das war keine Absicht. Ich habe es nicht geschafft es in einem Code - Tag zu posten, wenn ich das # - Symbol gedrückt habe war der gesamte Loge file weg. Ich poste sie jetzt im Anschluss, ich hoffe das ist auch okey.

Deffogger.log:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:06 on 19/08/2014 (Nathalie94)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

FRST.log:
FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01
Ran by Nathalie94 (administrator) on NATHALIE on 19-08-2014 14:10:16
Running from C:\Users\Nathalie94\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
(PlusHDv1.3) C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
() C:\Program Files (x86)\PHotkey\GPMTray.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-09-29] (Realtek Semiconductor Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2777840 2013-08-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Download Protect] => C:\ProgramData\dlprotect.exe
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [fst_de_46] => [X]
HKLM-x32\...\Run: [fst_de_48] => [X]
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [137352 2014-05-30] (Check Point Software Technologies Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-573978712-1729818946-958835018-1001\...\Run: [PriceMeterW] => "C:\Users\Nathalie94\AppData\Local\PriceMeter\pricemeterw.exe"
HKU\S-1-5-21-573978712-1729818946-958835018-1001\...\MountPoints2: {0fb35ca7-fde6-11e3-82a7-54271e5a91c6} - "F:\LaunchU3.exe" -a
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [232896 2014-08-06] (Client Connect LTD)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [187328 2014-08-06] (Client Connect LTD)
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=55&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=58&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=58&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&q={searchTerms}&SSPV=
SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}
SearchScopes: HKCU - {353B757B-964B-46F1-BD00-A29ED1E1FB89} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=HFA5&Lan=DE&q={searchTerms}&gu=47155c9848d44533acbc2fad088f39b8&tu=10G9z00EZ1D20F0&sku=&tstsId=&ver=&&r=734
SearchScopes: HKCU - {5FFB80D7-DCDE-47F9-B4DC-35AA191E88FE} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_secureddownload_14_24_ch&cd=2XzuyEtN2Y1L1QzuyDyEtByBtC0EyD0AzytC0CyBtCzztDzztN0D0Tzu0SzzzyyBtN1L2XzutBtFtBtCtFyEtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StB0BzytDzyyCtBzztG0CtCtD0FtGtC0Dzz0CtGzy0A0AtBtGyCzztCyBtCyCyCyC0ByCyBtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0CyCzzzz0AtCtCtG0C0BzyyBtG0AtC0C0CtGtCyBzzyEtGtDtAyCyB0EtBtA0FyCyByCtD2Q&cr=1626871350&ir=
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: HD-V1.3 -> {11111111-1111-1111-1111-110511831160} -> C:\Program Files (x86)\HD-V1.3\HD-V1.3-bho64.dll (PlusHDv1.3)
BHO-x32: HD-V1.3 -> {11111111-1111-1111-1111-110511831160} -> C:\Program Files (x86)\HD-V1.3\HD-V1.3-bho.dll (PlusHDv1.3)
BHO-x32: Zonealarm Helper Object -> {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} -> C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\bh\zonealarm.dll (Check Point Software Technologies LTD)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} ->  No File
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\user.js
FF SearchPlugin: C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\searchplugins\zonealarm.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HD-V1.3 - C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\Extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com [2014-07-31]
FF Extension: Plus-HD-V1.3c - C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\Extensions\FHJA85460364@KO32904357.com [2014-07-30]
FF Extension: No Name - C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\Extensions\staged [2014-07-31]
FF HKLM-x32\...\Firefox\Extensions: [{B1BBD911-3790-42DA-9474-B0F32459C4C7}] - C:\Windows\Installer\{8E53C5B6-1DB1-4859-A731-17F17EBB8B71}\{B1BBD911-3790-42DA-9474-B0F32459C4C7}.xpi
FF Extension: Download Protect - C:\Windows\Installer\{8E53C5B6-1DB1-4859-A731-17F17EBB8B71}\{B1BBD911-3790-42DA-9474-B0F32459C4C7}.xpi [2014-06-22]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]
CHR Extension: (Google Drive) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]
CHR Extension: (YouTube) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]
CHR Extension: (Adblock Plus) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-31]
CHR Extension: (Google-Suche) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]
CHR Extension: (ZoneAlarm Chrome Toolbar) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgdcapepedmpopjkmdbjnmmmfgllnfek [2014-07-31]
CHR Extension: (Google Wallet) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
CHR Extension: (HD-V1.3) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd [2014-08-01]
CHR Extension: (Google Mail) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]
CHR Extension: (Extutil) - C:\Users\NATHAL~1\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-06-14]
CHR Extension: (Managera) - C:\Users\NATHAL~1\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-06-14]
CHR HKCU\...\Chrome\Extension: [kgdcapepedmpopjkmdbjnmmmfgllnfek] - C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarm.crx [2014-02-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [61440 2013-09-26] () [File not signed]
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2982336 2014-08-06] (Client Connect LTD)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-14] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-14] (globalUpdate) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-22] (IObit)
R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 SupraSavingsService64; C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe [172544 2014-06-25] () [File not signed]
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3592120 2014-05-30] (Check Point Software Technologies Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [90936 2014-05-29] (Check Point Software Technologies, Ltd.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2014-04-30] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2014-04-30] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-04-30] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [490080 2014-04-30] (Kaspersky Lab ZAO)
R1 netfilter64; C:\Windows\System32\drivers\netfilter64.sys [46376 2014-07-17] (NetFilterSDK.com)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [548056 2013-09-05] (Realtek Semiconductor Corporation)
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [2968280 2014-01-15] (Realtek Semiconductor Corporation                           )
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2945240 2013-09-12] (Realtek Semiconductor Corporation                           )
R3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [450968 2014-05-30] (Check Point Software Technologies Ltd.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R1 {af16abf4-eac1-49b4-93fc-58f6ca799135}w64; C:\Windows\System32\drivers\{af16abf4-eac1-49b4-93fc-58f6ca799135}w64.sys [61120 2014-06-09] (StdLib)
R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-19 14:10 - 2014-08-19 14:11 - 00022972 _____ () C:\Users\Nathalie94\Desktop\FRST.txt
2014-08-19 14:10 - 2014-08-19 14:10 - 00000000 ____D () C:\FRST
2014-08-19 14:09 - 2014-08-19 14:08 - 02101760 _____ (Farbar) C:\Users\Nathalie94\Desktop\FRST64.exe
2014-08-19 14:06 - 2014-08-19 14:06 - 00000482 _____ () C:\Users\Nathalie94\Desktop\defogger_disable.log
2014-08-19 14:06 - 2014-08-19 14:06 - 00000000 _____ () C:\Users\Nathalie94\defogger_reenable
2014-08-19 14:04 - 2014-08-19 14:04 - 00000777 _____ () C:\Users\Nathalie94\Desktop\m24fkbq7 - Verknüpfung.lnk
2014-08-19 14:03 - 2014-08-19 13:59 - 00050477 _____ () C:\Users\Nathalie94\Desktop\Defogger.exe
2014-08-15 22:02 - 2014-08-15 22:02 - 00037096 _____ () C:\Users\Nathalie94\Downloads\Addition.txt
2014-08-15 21:53 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-15 21:53 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-15 21:53 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-15 21:53 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-15 21:53 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-15 21:53 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-15 21:53 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-15 21:53 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-15 21:53 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-15 21:53 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-15 21:52 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-15 21:52 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-15 21:52 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-15 21:52 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-15 21:52 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-15 21:52 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-15 21:52 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-15 21:52 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-15 21:52 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-15 21:52 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-15 21:52 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-15 21:52 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-15 21:52 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-15 21:52 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-15 21:52 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-15 21:52 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-15 21:52 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-15 21:52 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-15 21:52 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-15 21:52 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-15 21:52 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-15 21:52 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-15 21:52 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-15 21:52 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-15 21:52 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-15 21:52 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-15 21:52 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-15 21:52 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-15 21:52 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-15 21:52 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-15 21:52 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-15 21:52 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-15 21:51 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-15 21:51 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-15 21:48 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-08-15 21:48 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 21:48 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-08-15 21:48 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-15 21:48 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-15 21:48 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-08-15 21:46 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-08-15 21:46 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-08-15 21:46 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-08-15 21:46 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-08-15 21:46 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-08-15 21:46 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-08-15 21:46 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-08-15 21:46 - 2014-05-31 12:07 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-08-15 21:46 - 2014-05-31 12:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00419672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-08-15 21:46 - 2014-05-31 08:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-08-15 21:46 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-08-15 21:46 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-08-15 21:46 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-08-15 21:46 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-08-15 21:46 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-08-15 21:46 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-15 21:46 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-08-15 21:46 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-08-15 21:46 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-08-15 21:46 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-08-15 21:45 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-08-15 21:44 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-15 21:44 - 2014-08-07 00:39 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-15 21:44 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-03 15:12 - 2014-08-03 15:16 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Neuer Ordner
2014-08-01 15:27 - 2014-08-01 15:27 - 00002236 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-08-01 15:27 - 2014-08-01 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-08-01 15:26 - 2014-08-01 15:26 - 00895120 _____ (Google Inc.) C:\Users\Nathalie94\Downloads\GoogleEarthSetup.exe
2014-08-01 13:54 - 2014-08-02 02:17 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-01 13:54 - 2014-08-02 02:17 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-31 16:37 - 2014-08-11 14:44 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-07-31 16:37 - 2014-07-31 16:37 - 00000000 ____D () C:\Users\Nathalie94\AppData\Local\SearchProtect
2014-07-31 16:36 - 2014-08-19 12:54 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 16:36 - 2014-08-19 12:54 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 16:36 - 2014-08-15 22:47 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 16:36 - 2014-07-31 16:42 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 16:36 - 2014-07-31 16:42 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 16:36 - 2014-07-31 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Program Files (x86)\Check Point Software Technologies LTD
2014-07-31 11:54 - 2014-07-31 11:55 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Tante Uta Memory
2014-07-31 11:05 - 2014-07-31 11:06 - 00000000 ____D () C:\Users\Nathalie94\Downloads\Formulare
2014-07-31 10:46 - 2014-07-31 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-30 21:51 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-30 21:47 - 2014-08-03 15:16 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Flroida '14
2014-07-30 21:35 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-30 21:35 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-30 21:35 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-30 21:34 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-30 21:34 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-30 21:34 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-30 21:34 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-30 21:34 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-30 21:34 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-30 21:27 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-30 21:27 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-30 21:27 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-30 21:27 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-30 21:27 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-30 21:27 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-30 21:27 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-30 21:27 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-30 21:27 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-30 21:27 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-30 21:27 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-30 21:27 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-30 21:27 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-30 21:27 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-30 21:27 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-30 21:27 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-30 21:27 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-25 20:46 - 2014-08-15 21:38 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Iphone Nathalie

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-19 14:11 - 2014-08-19 14:10 - 00022972 _____ () C:\Users\Nathalie94\Desktop\FRST.txt
2014-08-19 14:10 - 2014-08-19 14:10 - 00000000 ____D () C:\FRST
2014-08-19 14:08 - 2014-08-19 14:09 - 02101760 _____ (Farbar) C:\Users\Nathalie94\Desktop\FRST64.exe
2014-08-19 14:06 - 2014-08-19 14:06 - 00000482 _____ () C:\Users\Nathalie94\Desktop\defogger_disable.log
2014-08-19 14:06 - 2014-08-19 14:06 - 00000000 _____ () C:\Users\Nathalie94\defogger_reenable
2014-08-19 14:06 - 2014-06-09 17:11 - 00000000 ____D () C:\Users\Nathalie94
2014-08-19 14:04 - 2014-08-19 14:04 - 00000777 _____ () C:\Users\Nathalie94\Desktop\m24fkbq7 - Verknüpfung.lnk
2014-08-19 14:04 - 2014-02-27 17:28 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-08-19 14:04 - 2014-02-27 17:28 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-08-19 14:04 - 2013-09-12 13:00 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-19 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-19 13:59 - 2014-08-19 14:03 - 00050477 _____ () C:\Users\Nathalie94\Desktop\Defogger.exe
2014-08-19 13:53 - 2014-06-09 17:11 - 00132817 _____ () C:\Users\Nathalie94\AppData\Local\BTServer.log
2014-08-19 13:27 - 2014-06-09 17:17 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-573978712-1729818946-958835018-1001
2014-08-19 13:14 - 2014-06-09 17:11 - 02017128 _____ () C:\Windows\WindowsUpdate.log
2014-08-19 13:03 - 2014-06-26 23:24 - 00000000 ____D () C:\Program Files\SupraSavings
2014-08-19 12:59 - 2014-06-14 17:30 - 00002792 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3.job
2014-08-19 12:55 - 2014-06-09 17:12 - 00000000 ____D () C:\Users\Nathalie94\Documents\Youcam
2014-08-19 12:54 - 2014-07-31 16:36 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-19 12:54 - 2014-07-31 16:36 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-19 12:54 - 2014-06-14 17:31 - 00002176 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4.job
2014-08-19 12:54 - 2014-06-14 17:31 - 00001466 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1.job
2014-08-19 12:54 - 2014-06-14 17:31 - 00001454 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6.job
2014-08-19 12:54 - 2014-06-14 17:31 - 00001414 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5.job
2014-08-19 12:54 - 2014-06-14 17:31 - 00001386 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7.job
2014-08-19 12:54 - 2014-06-14 17:31 - 00001320 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2.job
2014-08-19 12:54 - 2014-06-14 17:30 - 00003474 _____ () C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11.job
2014-08-19 12:54 - 2014-06-14 17:30 - 00000956 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-08-15 23:35 - 2014-06-14 17:30 - 00000960 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-15 23:05 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-15 23:05 - 2013-08-22 16:44 - 00503240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-15 23:02 - 2014-06-09 17:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-15 23:02 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-08-15 23:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-15 23:00 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-08-15 22:47 - 2014-07-31 16:36 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-15 22:02 - 2014-08-15 22:02 - 00037096 _____ () C:\Users\Nathalie94\Downloads\Addition.txt
2014-08-15 21:38 - 2014-07-25 20:46 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Iphone Nathalie
2014-08-15 21:36 - 2014-06-14 17:31 - 00000000 ____D () C:\Program Files\003
2014-08-15 21:36 - 2013-09-12 12:53 - 00013040 _____ () C:\Windows\PFRO.log
2014-08-15 21:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-15 21:26 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-08-15 21:16 - 2014-06-22 21:17 - 00000306 _____ () C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job
2014-08-15 21:15 - 2014-06-22 21:17 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-15 21:15 - 2014-06-22 21:17 - 00000000 ____D () C:\ProgramData\IObit
2014-08-12 17:08 - 2014-06-29 17:35 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Uni wichtige Dokumente
2014-08-11 14:44 - 2014-07-31 16:37 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-08-10 15:30 - 2014-06-29 17:58 - 00007289 ____H () C:\Windows\SysWOW64\BTImages.dat
2014-08-10 15:30 - 2013-10-24 15:16 - 00048613 _____ () C:\Windows\setupact.log
2014-08-10 10:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-08-07 04:12 - 2014-08-15 21:44 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-07 00:39 - 2014-08-15 21:44 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-06 12:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-08-04 17:44 - 2014-02-27 17:28 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-08-04 17:44 - 2013-08-22 22:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\winrm
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\WCN
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\slmgr
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\IME
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing
2014-08-03 15:16 - 2014-08-03 15:12 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Neuer Ordner
2014-08-03 15:16 - 2014-07-30 21:47 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Flroida '14
2014-08-02 05:56 - 2014-08-15 21:44 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-02 02:17 - 2014-08-01 13:54 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-02 02:17 - 2014-08-01 13:54 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-01 15:27 - 2014-08-01 15:27 - 00002236 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-08-01 15:27 - 2014-08-01 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-08-01 15:27 - 2014-06-14 17:28 - 00000000 ____D () C:\Users\Nathalie94\AppData\Local\Google
2014-08-01 15:27 - 2014-06-14 17:28 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-01 15:26 - 2014-08-01 15:26 - 00895120 _____ (Google Inc.) C:\Users\Nathalie94\Downloads\GoogleEarthSetup.exe
2014-08-01 13:53 - 2014-06-22 19:07 - 00431192 _____ () C:\Windows\system32\Drivers\vsconfig.xml
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB
2014-07-31 18:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-07-31 18:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-31 16:42 - 2014-07-31 16:36 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 16:42 - 2014-07-31 16:36 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 16:37 - 2014-07-31 16:37 - 00000000 ____D () C:\Users\Nathalie94\AppData\Local\SearchProtect
2014-07-31 16:36 - 2014-07-31 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Program Files (x86)\Check Point Software Technologies LTD
2014-07-31 11:55 - 2014-07-31 11:54 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Tante Uta Memory
2014-07-31 11:10 - 2014-07-01 23:12 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Kita 2014
2014-07-31 11:06 - 2014-07-31 11:05 - 00000000 ____D () C:\Users\Nathalie94\Downloads\Formulare
2014-07-31 10:46 - 2014-07-31 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-31 10:46 - 2014-06-24 22:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-30 21:57 - 2014-06-17 17:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-30 21:54 - 2013-10-24 14:33 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-30 20:47 - 2014-06-26 23:24 - 00000000 ____D () C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9
2014-07-25 16:52 - 2014-08-15 21:53 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:51 - 2014-08-15 21:53 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:28 - 2014-08-15 21:52 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:25 - 2014-08-15 21:52 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-15 21:52 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:59 - 2014-08-15 21:52 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:40 - 2014-08-15 21:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-15 21:52 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:30 - 2014-08-15 21:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-15 21:53 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-15 21:52 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-15 21:52 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:17 - 2014-08-15 21:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:10 - 2014-08-15 21:52 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:08 - 2014-08-15 21:52 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-15 21:52 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-15 21:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-15 21:52 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-15 21:52 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-25 13:43 - 2014-08-15 21:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-15 21:52 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-15 21:52 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:34 - 2014-08-15 21:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-15 21:52 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-15 21:52 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-15 21:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:09 - 2014-08-15 21:52 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-25 13:07 - 2014-08-15 21:52 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:03 - 2014-08-15 21:52 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-15 21:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-15 21:52 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-15 21:52 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-15 21:52 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-15 21:52 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-15 21:52 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

Some content of TEMP:
====================
C:\Users\Nathalie94\AppData\Local\Temp\COMAP.EXE
C:\Users\Nathalie94\AppData\Local\Temp\nsa3402.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsaE42E.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsbC477.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsgA740.exe
C:\Users\Nathalie94\AppData\Local\Temp\nskCD71.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsm1B38.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsm2AE9.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsnE4A1.tmp.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsoADC9.exe
C:\Users\Nathalie94\AppData\Local\Temp\nssD580.exe
C:\Users\Nathalie94\AppData\Local\Temp\nssEA59.exe
C:\Users\Nathalie94\AppData\Local\Temp\nsx20E5.exe
C:\Users\Nathalie94\AppData\Local\Temp\obexpf.dll
C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-06 14:28

==================== End Of Log ============================

--- --- ---

Addition.log:FRST Additions Logfile:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-08-2014 01
Ran by Nathalie94 at 2014-08-19 14:12:33
Running from C:\Users\Nathalie94\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ZoneAlarm Antivirus (Enabled - Up to date) {23B6D20A-C2DE-B3F5-C67D-07ECD854E6A9}
AS: ZoneAlarm Anti-Spyware (Enabled - Up to date) {98D733EE-E4E4-BC7B-FCCD-3C9EA3D3AC14}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
CyberLink Home Cinema 10 (x32 Version: 10.3025 - CyberLink Corp.) Hidden
CyberLink LabelPrint 2.5 (x32 Version: 2.5.0.5415 - CyberLink Corp.) Hidden
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3807_46074 - CyberLink Corp.) Hidden
CyberLink PhotoDirector 4 (x32 Version: 4.0.4317.0 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (x32 Version: 8.0.0.3202 - CyberLink Corp.) Hidden
CyberLink PowerDirector 11 (Version: 11.0.0.3714 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.5426.02 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy 1.5 (x32 Version: 1.5.0.3725a - CyberLink Corp.) Hidden
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.2527 - CyberLink Corp.)
CyberLink PowerRecover (Version: 5.7.0.2527 - CyberLink Corp.) Hidden
CyberLink YouCam 5 (x32 Version: 5.0.3318.0 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
FLV Player (remove only) (HKLM-x32\...\FLVM Player) (Version:  - )
Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HD-V1.3 (HKLM-x32\...\HD-V1.3) (Version: 1.34.6.10 - PlusHDv1.3)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3349 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1050 - Intel Corporation)
Intel(R) Trusted Execution Engine (Version: 1.1.1.1 - Intel Corporation) Hidden
Intel(R) Trusted Execution Engine Driver (Version: 1.0.0.1050 - Intel Corporation) Hidden
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.3.8.2663 - IObit)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
omiga-plus uninstaller (HKLM-x32\...\omiga-plus uninstaller) (Version:  - omiga-plus)
PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0094 - Pegatron Corporation)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.769.093013 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7045 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.16.20.192 - Client Connect LTD) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.9.1 - Synaptics Incorporated)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Valokuvavalikoima (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
WindowsProtectManger20.0.0.401 (HKLM-x32\...\WindowsProtectManger) (Version: 20.0.0.401 - Fuyu LIMITED) <==== ATTENTION
ZoneAlarm Antivirus (x32 Version: 13.2.015.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Firewall (x32 Version: 13.2.015.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Antivirus + Firewall (HKLM-x32\...\ZoneAlarm Free Antivirus + Firewall) (Version: 13.2.015.000 - Check Point)
ZoneAlarm Security (x32 Version: 13.2.015.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Security Toolbar  (HKCU\...\zonealarm) (Version: 1.8.29.17 - Check Point Software Technologies LTD)
ZoneAlarm Security Toolbar  (HKLM-x32\...\zonealarm) (Version: 1.8.29.17 - Check Point Software Technologies LTD)
Συλλογή φωτογραφιών (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

22-06-2014 17:43:26 Wiederherstellungsvorgang
30-07-2014 19:46:23 Windows Update
04-08-2014 15:26:56 Sprachpaketdeinstallation
15-08-2014 20:56:21 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {250D5FA6-920C-41E0-8F21-FDDC22F28A73} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {26903E00-411B-4945-B061-E6B731EC3E40} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4 => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-4.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {3007947E-7671-40A4-91A7-3D90063F9BA2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-07-30] (Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3864D074-C367-4247-9087-FEA5F392F60B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3EC45A5E-AD18-4775-9392-D335D3E20BD8} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6 => C:\Program Files (x86)\HD-V1.3\HD-V1.3-novainstaller.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {47A66921-E3F1-419C-BD6C-50515BCFD880} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11 => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-11.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4AAD4FD6-9379-4CAD-AAB9-16BC3C1DB8D0} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {4B737289-5F7C-49CF-9EFA-A3411521C841} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3 => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-3.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {5A2EBC75-1FD5-4839-A63F-51F35CFD5223} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-31] (Google Inc.)
Task: {5C5F6A69-502A-4707-86DE-75149ACA266D} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-06-14] (globalUpdate)
Task: {5FA26366-536F-4DD5-8FA4-F2F574FE12C6} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {60BF252D-70DA-4ADB-92C3-E1D7FC203B18} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {64FBF995-659D-45D4-A43D-B14093AACB25} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5 => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-5.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6BD14C2D-DAB3-4DEB-91D1-A1CE0958C9D3} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-06-22] (IObit)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {83A8C7CF-EF29-4166-804F-A5EC0919CBBA} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-14] (Synaptics Incorporated)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9A5BE646-7B02-410C-83A9-9A886A47E3A0} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {9C458FD3-1FDA-4DA5-849D-2F86C509F5EB} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A3708B28-1CEE-4C25-9ED2-E12E05591FC1} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {B59F7B6A-FCD9-449A-BD8C-C0B22DE01E96} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1 => C:\Program Files (x86)\HD-V1.3\HD-V1.3-codedownloader.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {C5DF5439-C9C9-4EA9-8A32-DDDAC9A7287C} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {CD6CD3C9-49C1-422B-92AC-C21BA421A890} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DFDA8D10-8A75-4EEA-9AAF-4CF7649F798D} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7 => C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {E573C097-1E45-4C9B-8764-EB0D2BB2D382} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {EF519147-352C-4582-8355-45BE0560D136} - System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2 => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-2.exe [2014-06-14] (PlusHDv1.3) <==== ATTENTION
Task: {F6692B1F-6A27-4253-8469-7F3D8B694FA0} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-06-14] (globalUpdate)
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1.job => C:\Program Files (x86)\HD-V1.3\HD-V1.3-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11.job => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2.job => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3.job => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4.job => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5.job => C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6.job => C:\Program Files (x86)\HD-V1.3\HD-V1.3-novainstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7.job => C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Loaded Modules (whitelisted) =============

2014-03-19 07:41 - 2013-12-03 01:21 - 00136192 _____ () C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
2014-03-19 07:23 - 2013-09-26 22:08 - 00061440 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2014-02-27 18:13 - 2013-03-06 16:42 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2014-06-25 19:58 - 2014-06-25 19:58 - 00172544 _____ () C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe
2014-06-12 21:05 - 2014-06-12 21:05 - 00110080 _____ () C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\nfapi.dll
2014-06-12 21:05 - 2014-06-12 21:05 - 00456192 _____ () C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\ProtocolFilters.dll
2014-03-19 07:41 - 2013-10-14 21:11 - 02215424 _____ () C:\Program Files (x86)\PHotkey\PHotkey.exe
2014-03-19 07:41 - 2010-12-17 16:04 - 00449032 _____ () C:\Program Files (x86)\PHotkey\ATouch64.exe
2014-03-19 07:41 - 2012-10-23 20:07 - 03471872 _____ () C:\Program Files (x86)\PHotkey\POSD.exe
2014-03-19 07:41 - 2013-10-14 19:09 - 08856576 _____ () C:\Program Files (x86)\PHotkey\GPMTray.exe
2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-19 07:41 - 2009-12-18 17:36 - 00973432 _____ () C:\Program Files (x86)\PHotkey\acAuth.dll
2014-03-19 07:41 - 2013-09-18 01:23 - 00108032 _____ () C:\Program Files (x86)\PHotkey\PGFNEX.dll
2014-02-27 18:12 - 2013-08-05 09:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-08-05 17:48 - 2013-08-05 17:48 - 00016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-06-14 17:31 - 2014-06-14 17:31 - 00123712 _____ () C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.dll
2014-08-15 21:10 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-15 21:10 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-15 21:10 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-15 21:10 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-15 21:10 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll
2014-08-15 21:10 - 2014-08-07 05:20 - 14669128 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/19/2014 01:53:41 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1219

Error: (08/19/2014 01:53:41 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1219

Error: (08/19/2014 01:53:41 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/15/2014 10:44:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 36.0.1985.143, Zeitstempel: 0x53e2e515
Name des fehlerhaften Moduls: chrome.dll, Version: 36.0.1985.143, Zeitstempel: 0x53e2e1c7
Ausnahmecode: 0x80000003
Fehleroffset: 0x004b13b3
ID des fehlerhaften Prozesses: 0x15b4
Startzeit der fehlerhaften Anwendung: 0xchrome.exe0
Pfad der fehlerhaften Anwendung: chrome.exe1
Pfad des fehlerhaften Moduls: chrome.exe2
Berichtskennung: chrome.exe3
Vollständiger Name des fehlerhaften Pakets: chrome.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5

Error: (08/11/2014 00:29:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 160078

Error: (08/11/2014 00:29:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 160078

Error: (08/11/2014 00:29:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/11/2014 00:26:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1172

Error: (08/11/2014 00:26:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1172

Error: (08/11/2014 00:26:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (08/19/2014 00:56:39 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{7AD0F41E-A1FE-4345-9EEF-090821AB9AC1}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (08/15/2014 09:35:41 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (08/15/2014 09:33:28 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%1381

Error: (08/15/2014 09:33:24 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%1381

Error: (08/15/2014 09:32:49 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%1381

Error: (08/15/2014 09:31:54 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%1381

Error: (08/15/2014 09:30:47 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%1381

Error: (08/15/2014 09:29:14 PM) (Source: DCOM) (EventID: 10001) (User: Nathalie)
Description: C:\Windows\System32\ThumbnailExtractionHost.exe -Embedding5{4545DEA0-2DFC-4906-A728-6D986BA399A9}Nicht verfügbarNicht verfügbar

Error: (08/15/2014 09:29:14 PM) (Source: DCOM) (EventID: 10001) (User: Nathalie)
Description: C:\Windows\System32\ThumbnailExtractionHost.exe -Embedding5{4545DEA0-2DFC-4906-A728-6D986BA399A9}Nicht verfügbarNicht verfügbar

Error: (08/15/2014 09:27:12 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%1381


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-06-17 23:30:23.663
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) CPU N2920 @ 1.86GHz
Percentage of memory in use: 54%
Total physical RAM: 3986.44 MB
Available physical RAM: 1794.78 MB
Total Pagefile: 5522.44 MB
Available Pagefile: 3014.3 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:300.79 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:43.46 GB) NTFS
Drive f: (U3 System) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive g: (Cruzer) (Removable) (Total:7.47 GB) (Free:7.42 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: E87CCE09)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

--- --- ---

Nathalie · 19.08.2014, 20:08

Jetzt hab ich das auch mit dem #- Symbol verstanden

Danke !

Zone Alarm, llog files(08.07.2014)

Code:

ATTFilter

ZoneAlarm Protokoll-Client v13.2.15.0
Windows 8.1 x64-6.3.9600--SMP
Typ,Datum,Uhrzeit,Quelle,Ziel,Transport (Sicherheit)
Typ,Datum,Uhrzeit,Virusname,Dateiname,Modus,E-Mail-ID (Anti-Virus)
Typ,Datum,Uhrzeit,Quelle,Ziel,Aktion,Dienst (IM-Sicherheit)
Typ,Datum,Uhrzeit,Quelle,Ziel,Programm,Aktion (Schutz gegen gefährlichen Code)
Typ,Datum,Uhrzeit,Aktion,Produkt,Datei,Ereignis,Unterereignis,Klasse,Daten,Daten,… (OSFirewall)
Typ,Datum,Uhrzeit,Name,Typ,Modus (Anti-Spyware)
FWOUT,2014/08/07,18:35:48 +2:00 GMT,192.168.2.109:63159,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5Zt/YAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKjBAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/07,18:35:48 +2:00 GMT,192.168.2.109:63158,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZtvYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKlBAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/07,18:35:48 +2:00 GMT,192.168.2.109:63161,2.16.62.113:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5xufYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKHBQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/07,18:35:52 +2:00 GMT,192.168.2.109:63184,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5j0PYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKQAAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/update,2014/08/07,18:41:16 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158117984
FWOUT,2014/08/07,18:43:50 +2:00 GMT,192.168.2.109:63520,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jIPgAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLcAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/treatment,2014/08/07,19:14:28 +2:00 GMT,HEUR:Trojan.Win32.Generic,C:\Users\Nathalie94\Downloads\Player_Setup.exe,Gelöscht,Auto
AV/treatment,2014/08/07,19:14:28 +2:00 GMT,HEUR:Trojan.Win32.Generic,C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\File System\001\t\00\00000000,Gelöscht,Auto
AV/treatment,2014/08/07,19:23:26 +2:00 GMT,HEUR:Trojan.Win32.Generic,C:\Users\Nathalie94\Downloads\Player.exe,Gelöscht,Auto
AV/treatment,2014/08/07,19:23:28 +2:00 GMT,HEUR:Trojan.Win32.Generic,C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\File System\002\t\00\00000000,Gelöscht,Auto
OSFW,2014/08/07,19:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,19:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,19:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,19:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,19:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,19:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,20:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,20:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,20:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,20:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,20:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/07,20:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
FWOUT,2014/08/07,20:33:20 +2:00 GMT,192.168.2.109:51113,2.16.62.237:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED7tqccAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJhBQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/08,15:04:40 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
OSFW,2014/08/08,15:04:40 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
FWOUT,2014/08/08,15:04:46 +2:00 GMT,192.168.2.109:54303,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jH9QAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKBAwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/08,15:04:48 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/08,15:04:48 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
FWOUT,2014/08/08,15:35:50 +2:00 GMT,192.168.2.109:54525,2.16.62.113:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5x/dQAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJ0BgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/08/08,20:50:30 +2:00 GMT,192.168.2.109:54211,209.87.211.180:443,TCP (flags:AR),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm3RV9O0w9MAALsBAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANART8AAAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/08/08,20:50:30 +2:00 GMT,192.168.2.109:54212,209.87.211.180:443,TCP (flags:AR),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm3RV9O0xNMAALsBAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARQBAQAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/08/08,20:50:30 +2:00 GMT,192.168.2.109:54553,2.16.62.24:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED4YGdUAAFAAAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANAQIfAQAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/08/08,20:50:30 +2:00 GMT,192.168.2.109:54524,207.46.114.61:80,TCP (flags:AF),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm3PLnI9/NQAAFAAAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARFwAQAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/08,20:51:28 +2:00 GMT,192.168.2.109:54901,2.16.217.138:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CENmKddYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQI6AgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/update,2014/08/08,20:52:52 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158183936
FWOUT,2014/08/10,10:19:00 +2:00 GMT,192.168.2.109:60485,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jRewAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLbAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/10,10:19:02 +2:00 GMT,192.168.2.109:60502,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jVuwAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJxAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/10,10:19:50 +2:00 GMT,192.168.2.109:60590,2.16.62.131:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED6DruwAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQK+AgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/update,2014/08/10,10:21:50 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158300512
FWOUT,2014/08/10,10:21:52 +2:00 GMT,192.168.2.109:61065,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5Zie4AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKwAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/10,10:21:54 +2:00 GMT,192.168.2.109:61068,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jjO4AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKGBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/10,14:01:22 +2:00 GMT,192.168.2.109:65436,88.221.92.23:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3VwXnP8AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLUAAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/10,14:01:24 +2:00 GMT,192.168.2.109:65445,88.221.92.25:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3VwZpf8AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKKBAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/10,16:46:04 +2:00 GMT,192.168.2.109:50815,88.221.92.78:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3VxOf8YAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLnAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/scan,2014/08/11,08:50:58 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Auto,2563 files scanned (0 detections)
AV/update,2014/08/11,08:53:22 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158357952
FWROUTE,2014/08/11,09:10:08 +2:00 GMT,157.55.236.108:443,192.168.2.109:50858,TCP (flags:AF),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AZ037GzAqAJtuwEAAKrGAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARFbAwAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/08/11,09:10:08 +2:00 GMT,192.168.2.109:51903,173.194.113.67:443,TCP (flags:AF),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm2twnFDv8oAALsBAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARHbAwAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/08/11,09:10:10 +2:00 GMT,192.168.2.109:51888,37.58.101.200:80,TCP (flags:A),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0lOmXIsMoAAFAAAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARDYBQAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/11,09:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,09:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,09:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,09:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,09:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,09:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,10:11:56 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,10:11:56 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,10:11:56 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,10:11:56 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,10:11:56 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/11,10:11:56 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
FWOUT,2014/08/11,11:31:00 +2:00 GMT,192.168.2.109:55519,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5j39gAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJdAwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/11,13:12:32 +2:00 GMT,192.168.2.109:56908,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jTN4AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKjBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/11,14:39:02 +2:00 GMT,192.168.2.109:56942,2.16.62.144:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED6Qbt4AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLGAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/11,14:39:02 +2:00 GMT,192.168.2.109:56944,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZcN4AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQL1AgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/11,14:39:12 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
OSFW,2014/08/11,14:39:12 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
PE,2014/08/11,14:44:30 +2:00 GMT,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,23.209.176.11:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&CRC=7c630c06&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
AV/treatment,2014/08/11,14:44:30 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Windows\Temp\nsrA183.exe,Skipped by settings,Auto
PE,2014/08/11,14:44:32 +2:00 GMT,SP Usage Sender,C:\Windows\Temp\nsrA183.exe,107.22.223.150:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nsrA183.exe&Created=450650ef&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&CRC=39da29bc&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/08/11,14:44:32 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,OPENPROCESS,,C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CPROGRA%7E2%5CSearchProtect%5CMain%5Cbin%5CCltMngSvc.exe
OSFW,2014/08/11,14:44:32 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,OPENPROCESS,,C:\PROGRA~2\SearchProtect\Main\bin\CltMngSvc.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CPROGRA%7E2%5CSearchProtect%5CMain%5Cbin%5CCltMngSvc.exe
OSFW,2014/08/11,14:44:32 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\cmd.exe,8000053f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe&ARG2=8000053f
OSFW,2014/08/11,14:44:32 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\cmd.exe,8000053f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe&ARG2=8000053f
OSFW,2014/08/11,14:44:34 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:34 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:36 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:36 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:36 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:36 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:36 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:36 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:36 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\cmd.exe,8000053f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe&ARG2=8000053f
OSFW,2014/08/11,14:44:36 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\cmd.exe,8000053f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe&ARG2=8000053f
OSFW,2014/08/11,14:44:36 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:36 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:38 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:38 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,80000556,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=80000556
OSFW,2014/08/11,14:44:38 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:38 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:38 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/08/11,14:44:38 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPSetup.exe&Created=45065909&Size=6837632&MD5=81c1d94ffd2c170a86c4c0c7b183e9ef&SKIMP=683bc34ae0ed0437e4cd5a01dd2cd49c&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
AV/treatment,2014/08/11,14:44:38 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Windows\Temp\nsrA183.exe,Skipped by settings,Auto
AV/treatment,2014/08/11,14:44:40 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Windows\Temp\nsfC400.exe,Skipped by settings,Auto
PE,2014/08/11,14:44:40 +2:00 GMT,Search Protect,C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe,54.225.145.186:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.20.192&FN=CltMngSvc.exe&Created=450650ef&Size=2982336&MD5=49010923a074f8c93b0cbc10600187cd&SKIMP=a48a1632928a14dc6a70663d105c1663&CRC=19fa1f83&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/08/11,14:44:42 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENPROCESS,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPTool64.exe&Created=450650ef&Size=1734592&MD5=fe7292c8fc7d1a0314a26e253af2254d&SKIMP=693376fbdc561f38ff172798176b420b&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/08/11,14:44:42 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENPROCESS,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPTool64.exe&Created=450650ef&Size=1734592&MD5=fe7292c8fc7d1a0314a26e253af2254d&SKIMP=693376fbdc561f38ff172798176b420b&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/08/11,14:44:42 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENTHREAD,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPTool64.exe&Created=450650ef&Size=1734592&MD5=fe7292c8fc7d1a0314a26e253af2254d&SKIMP=693376fbdc561f38ff172798176b420b&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/08/11,14:44:42 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENTHREAD,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=SPTool64.exe&Created=450650ef&Size=1734592&MD5=fe7292c8fc7d1a0314a26e253af2254d&SKIMP=693376fbdc561f38ff172798176b420b&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
PE,2014/08/11,14:44:42 +2:00 GMT,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,23.209.176.11:443,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.20.192&FN=cltmng.exe&Created=450650ef&Size=5428672&MD5=2875ed5399cd95ad378b35097311fb1e&SKIMP=6138274b3146cc3357f3ac50e4ebf478&CRC=52d61188&RIPA=&RP=47873&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/08/11,14:44:42 +2:00 GMT,Search Protect,C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe,23.209.176.11:443,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.20.192&FN=cltmngui.exe&Created=450650ef&Size=3226560&MD5=fcd5525df15e9f59707ae0cbe0d636c2&SKIMP=1a1cca0318dca7f6fd6d2e7301148c32&CRC=783793d4&RIPA=&RP=47873&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
AV/treatment,2014/08/11,14:44:46 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Windows\Temp\nsfC400.exe,Skipped by settings,Auto
FWOUT,2014/08/11,19:26:48 +2:00 GMT,192.168.2.109:57224,88.221.93.80:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3V1QiN8AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQK9AQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/11,19:26:48 +2:00 GMT,192.168.2.109:57225,88.221.93.94:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3V1eid8AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLNAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/11,19:26:48 +2:00 GMT,192.168.2.109:57228,88.221.93.94:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3V1ejN8AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQITBQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/11,19:26:48 +2:00 GMT,192.168.2.109:57235,88.221.93.94:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm1Y3V1ek98AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJbBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/update,2014/08/11,19:28:20 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158357952
FWOUT,2014/08/12,17:08:16 +2:00 GMT,192.168.2.109:58435,2.16.62.113:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5xQ+QAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJDBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,17:08:16 +2:00 GMT,192.168.2.109:58437,209.87.211.136:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm3RV9OIReQAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJgBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,17:08:32 +2:00 GMT,192.168.2.109:58475,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5Za+QAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJeBwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,17:08:32 +2:00 GMT,192.168.2.109:58481,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZceQAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJjBwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,17:08:48 +2:00 GMT,192.168.2.109:58569,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jyeQAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJ/BwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,17:08:54 +2:00 GMT,192.168.2.109:58626,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jAuUAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQIIBwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/12,17:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/12,17:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/12,17:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/12,17:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/12,17:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/12,17:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
FWOUT,2014/08/12,17:47:00 +2:00 GMT,192.168.2.109:60229,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZResAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKUAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,17:47:00 +2:00 GMT,192.168.2.109:60230,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZRusAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKdAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/12,19:11:10 +2:00 GMT,192.168.2.109:61718,2.16.62.229:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED7lFvEAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKDAAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/update,2014/08/12,19:14:24 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158445216
OSFW,2014/08/12,22:54:26 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,REGISTRY,SETVALUE,,HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN,Start Page,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=cltmng.exe&Created=450650ef&Size=5428672&MD5=2875ed5399cd95ad378b35097311fb1e&SKIMP=6138274b3146cc3357f3ac50e4ebf478&&CT=4007&EV=4&SUB=9&SEV=2&ARG1=HKCU%5CSOFTWARE%5CMICROSOFT%5CINTERNET+EXPLORER%5CMAIN&ARG2=Start+Page
OSFW,2014/08/12,22:54:26 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,REGISTRY,SETVALUE,,HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN,Start Page,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.20.192&FN=cltmng.exe&Created=450650ef&Size=5428672&MD5=2875ed5399cd95ad378b35097311fb1e&SKIMP=6138274b3146cc3357f3ac50e4ebf478&&CT=4007&EV=4&SUB=9&SEV=2&ARG1=HKCU%5CSOFTWARE%5CMICROSOFT%5CINTERNET+EXPLORER%5CMAIN&ARG2=Start+Page

Zonealarm log files (30.07.2014 Teil I)

Code:

ATTFilter

ZoneAlarm Protokoll-Client v13.2.15.0
Windows 8.1 x64-6.3.9600--SMP
Typ,Datum,Uhrzeit,Quelle,Ziel,Transport (Sicherheit)
Typ,Datum,Uhrzeit,Virusname,Dateiname,Modus,E-Mail-ID (Anti-Virus)
Typ,Datum,Uhrzeit,Quelle,Ziel,Aktion,Dienst (IM-Sicherheit)
Typ,Datum,Uhrzeit,Quelle,Ziel,Programm,Aktion (Schutz gegen gefährlichen Code)
Typ,Datum,Uhrzeit,Aktion,Produkt,Datei,Ereignis,Unterereignis,Klasse,Daten,Daten,… (OSFirewall)
Typ,Datum,Uhrzeit,Name,Typ,Modus (Anti-Spyware)
OSFW,2014/07/30,20:46:58 +2:00 GMT,UNKNOWN(0),6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe,C:\Windows\Temp\6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\cmd.exe,8000009f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe&VER=30.07.2014+20%3A46%3A18&FN=6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe&Created=44fea5c9&Size=2545088&MD5=8a9f97b37a08450ededd70a4699b7b9e&SKIMP=207592667fd19ee315fd38455e5ec4d7&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Ccmd.exe&ARG2=8000009f
OSFW,2014/07/30,20:46:58 +2:00 GMT,ALLOWED,6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe,C:\Windows\Temp\6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\cmd.exe,8000009f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe&VER=30.07.2014+20%3A46%3A18&FN=6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe&Created=44fea5c9&Size=2545088&MD5=8a9f97b37a08450ededd70a4699b7b9e&SKIMP=207592667fd19ee315fd38455e5ec4d7&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Ccmd.exe&ARG2=8000009f
OSFW,2014/07/30,20:47:14 +2:00 GMT,UNKNOWN(0),hmmwwoblzz64.exe,C:\Program Files\003\hmmwwoblzz64.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\cmd.exe,8000009f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=hmmwwoblzz64.exe&VER=14.06.2014+17%3A33%3A12&FN=hmmwwoblzz64.exe&Created=44ce8c26&Size=709120&MD5=f3dac82f16a980b79c24b0d86b92400a&SKIMP=d15ecc86ade58f5433783138cfd16b2b&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Ccmd.exe&ARG2=8000009f
OSFW,2014/07/30,20:47:14 +2:00 GMT,ALLOWED,hmmwwoblzz64.exe,C:\Program Files\003\hmmwwoblzz64.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\cmd.exe,8000009f,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=hmmwwoblzz64.exe&VER=14.06.2014+17%3A33%3A12&FN=hmmwwoblzz64.exe&Created=44ce8c26&Size=709120&MD5=f3dac82f16a980b79c24b0d86b92400a&SKIMP=d15ecc86ade58f5433783138cfd16b2b&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Ccmd.exe&ARG2=8000009f
AV/update,2014/07/30,21:01:18 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1157529984
AV/scan,2014/07/30,21:04:38 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Auto,2948 files scanned (0 detections)
AV/treatment,2014/07/31,10:52:20 +2:00 GMT,HEUR:Trojan.Win32.Generic,C:\Users\Nathalie94\Downloads\Setup.exe,Gelöscht,Auto
AV/treatment,2014/07/31,11:18:54 +2:00 GMT,not-a-virus:Downloader.NSIS.Agent.ij,C:\Users\Nathalie94\AppData\Local\Microsoft\Windows\INetCache\IE\7B7B3VBN\WajamChecker[1].exe//#//UPX,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:20:10 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:20:12 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:20:12 +2:00 GMT,not-a-virus:Downloader.NSIS.Agent.ji,C:\Users\Nathalie94\AppData\Local\Temp\n2679\systemspeedup_1203-72c8223c.exe//data0001,Skipped by settings,Manuell
AV/scan,2014/07/31,11:29:20 +2:00 GMT,Mehrere Dateien,Prüfung abgebrochen,Manuell,108394 files scanned (4 detections)
AV/scan,2014/07/31,11:32:20 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Manuell,3155 files scanned (0 detections)
AV/treatment,2014/07/31,11:48:08 +2:00 GMT,not-a-virus:Downloader.Win32.Morstar.ag,C:\Program Files (x86)\FLVM Player\FLVPlayerUninstaller.exe//dmr.exe,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:54:26 +2:00 GMT,not-a-virus:AdWare.Win32.AnProt.a,C:\Users\Nathalie94\AppData\Local\AnyProtectScannerSetup.exe,Datei repariert,Manuell
,2014/07/31,11:54:26 +2:00 GMT,
AV/treatment,2014/07/31,11:55:10 +2:00 GMT,not-a-virus:Downloader.NSIS.Agent.ij,C:\Users\Nathalie94\AppData\Local\Microsoft\Windows\INetCache\IE\7B7B3VBN\WajamChecker[1].exe//wajam_validate.exe//UPX,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:57:10 +2:00 GMT,not-a-virus:AdWare.Win32.AnProt.a,C:\Users\Nathalie94\AppData\Local\Temp\is45637729\152569_stp\AnyProtectScannerSetup.exe,Datei repariert,Manuell
,2014/07/31,11:57:10 +2:00 GMT,
AV/treatment,2014/07/31,11:57:12 +2:00 GMT,not-a-virus:AdWare.Win32.AnProt.a,C:\Users\Nathalie94\AppData\Local\Temp\is45637729\2327716_stp\AnyProtectScannerSetup.exe,Datei repariert,Manuell
,2014/07/31,11:57:12 +2:00 GMT,
AV/treatment,2014/07/31,11:57:12 +2:00 GMT,not-a-virus:AdWare.Win32.AnProt.a,C:\Users\Nathalie94\AppData\Local\Temp\is45637729\246865_stp\AnyProtectScannerSetup.exe,Datei repariert,Manuell
,2014/07/31,11:57:12 +2:00 GMT,
AV/treatment,2014/07/31,11:57:14 +2:00 GMT,not-a-virus:AdWare.Win32.AnProt.a,C:\Users\Nathalie94\AppData\Local\Temp\is45637729\48713204_stp\AnyProtectScannerSetup.exe,Datei repariert,Manuell
,2014/07/31,11:57:14 +2:00 GMT,
AV/treatment,2014/07/31,11:57:14 +2:00 GMT,not-a-virus:AdWare.Win32.AnProt.a,C:\Users\Nathalie94\AppData\Local\Temp\is45637729\94500097_stp\AnyProtectScannerSetup.exe,Datei repariert,Manuell
,2014/07/31,11:57:14 +2:00 GMT,
AV/treatment,2014/07/31,11:57:16 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:57:20 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:57:20 +2:00 GMT,not-a-virus:Downloader.NSIS.Agent.ji,C:\Users\Nathalie94\AppData\Local\Temp\n2679\systemspeedup_1203-72c8223c.exe//data0001,Skipped by settings,Manuell
AV/treatment,2014/07/31,11:59:36 +2:00 GMT,Trojan.Win32.AntiFW.b,C:\Users\Nathalie94\Downloads\Manantial - Tatanka.aac.exe,Datei repariert,Manuell
,2014/07/31,11:59:36 +2:00 GMT,
AV/scan,2014/07/31,12:52:04 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Manuell,412075 files scanned (12 detections)
AV/scan,2014/07/31,16:32:52 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Manuell,3393 files scanned (0 detections)
PE,2014/07/31,16:34:52 +2:00 GMT,DLG_chrome_browser_de-DE.exe,C:\Users\Nathalie94\Downloads\DLG_chrome_browser_de-DE.exe,173.194.116.168:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=DLG_chrome_browser_de-DE.exe&VER=14.06.2014+17%3A24%3A20&FN=DLG_chrome_browser_de-DE.exe&Created=44ce8b0a&Size=464872&MD5=f2232c966b5b7e7727337dda0a0c5900&SKIMP=51b59d9039c156ee048366ce536c1595&CRC=f9f37ba0&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:34:58 +2:00 GMT,chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,173.194.116.180:443,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&RIPA=&RP=47873&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/07/31,16:36:06 +2:00 GMT,UNKNOWN(0),chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,SPAWNPROCESS,,C:\Users\Nathalie94\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,800005d6,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CUsers%5CNathalie94%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe&ARG2=800005d6
OSFW,2014/07/31,16:36:06 +2:00 GMT,ALLOWED,chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,SPAWNPROCESS,,C:\Users\Nathalie94\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,800005d6,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CUsers%5CNathalie94%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe&ARG2=800005d6
OSFW,2014/07/31,16:36:06 +2:00 GMT,UNKNOWN(0),chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,OPENTHREAD,,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CUsers%5CNATHAL%7E1%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe
OSFW,2014/07/31,16:36:06 +2:00 GMT,ALLOWED,chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,OPENTHREAD,,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CUsers%5CNATHAL%7E1%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe
OSFW,2014/07/31,16:36:06 +2:00 GMT,UNKNOWN(0),chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,OPENPROCESS,,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CUsers%5CNATHAL%7E1%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe
OSFW,2014/07/31,16:36:06 +2:00 GMT,ALLOWED,chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,OPENPROCESS,,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CUsers%5CNATHAL%7E1%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe
OSFW,2014/07/31,16:36:06 +2:00 GMT,UNKNOWN(0),chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,OPENPROCESS,,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CUsers%5CNATHAL%7E1%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe
OSFW,2014/07/31,16:36:06 +2:00 GMT,ALLOWED,chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,OPENPROCESS,,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\chrome\ChromeStandaloneSetup.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CUsers%5CNATHAL%7E1%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cchrome%5CChromeStandaloneSetup.exe
AV/treatment,2014/07/31,16:36:46 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.g,C:\Users\NATHAL~1\AppData\Local\Temp\DLG_o3RTtvYz\exe\conduit-ltd-search-protect-1.0-de-de\sp-downloader.exe,Skipped by settings,Auto
OSFW,2014/07/31,16:36:48 +2:00 GMT,UNKNOWN(0),chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,SPAWNPROCESS,,C:\Users\Nathalie94\AppData\Local\Temp\DLG_o3RTtvYz\exe\conduit-ltd-search-protect-1.0-de-de\sp-downloader.exe,800005db,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CUsers%5CNathalie94%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cconduit-ltd-search-protect-1.0-de-de%5Csp-downloader.exe&ARG2=800005db
OSFW,2014/07/31,16:36:48 +2:00 GMT,ALLOWED,chrome_1.0.exe,C:\Users\Nathalie94\AppData\Local\Temp\DLG\chrome_1.0.exe,PROCESS,SPAWNPROCESS,,C:\Users\Nathalie94\AppData\Local\Temp\DLG_o3RTtvYz\exe\conduit-ltd-search-protect-1.0-de-de\sp-downloader.exe,800005db,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=chrome_1.0.exe&VER=31.07.2014+16%3A34%3A58&FN=chrome_1.0.exe&Created=44ff845d&Size=471496&MD5=5150b90834f019b5874ea645ef144e8c&SKIMP=a4326415fe4f6dbf1286ec3595b9e5d3&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CUsers%5CNathalie94%5CAppData%5CLocal%5CTemp%5CDLG_o3RTtvYz%5Cexe%5Cconduit-ltd-search-protect-1.0-de-de%5Csp-downloader.exe&ARG2=800005db
PE,2014/07/31,16:36:48 +2:00 GMT,Search Protect by conduit,C:\Users\Nathalie94\AppData\Local\Temp\DLG_o3RTtvYz\exe\conduit-ltd-search-protect-1.0-de-de\sp-downloader.exe,184.72.217.85:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect+by+conduit&VER=31.07.2014+16%3A36%3A48&FN=sp-downloader.exe&Created=44ff8498&Size=66368&MD5=9fb9d49c2db7edd1084ab765d619f5c6&SKIMP=0b45bdb5055bcdc15827e2f4cbc85f0e&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:36:52 +2:00 GMT,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsr6E18.exe,54.243.179.104:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=31.07.2014+16%3A36%3A52&FN=nsr6E18.exe&Created=44ff849a&Size=175208&MD5=6fd673efd6e4d460318c4f9ee43367c8&SKIMP=68b46968cc2b9d67408f05da610d8481&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:37:08 +2:00 GMT,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,23.209.176.11:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:37:12 +2:00 GMT,SP Usage Sender,C:\Users\Nathalie94\AppData\Local\Temp\nsbC477.exe,54.243.179.104:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nsbC477.exe&Created=44f67b76&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:37:14 +2:00 GMT,SP Usage Sender,C:\Users\Nathalie94\AppData\Local\Temp\nskCD71.exe,54.243.179.104:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nskCD71.exe&Created=44f67b76&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
FWOUT,2014/07/31,16:37:16 +2:00 GMT,192.168.2.109:58754,2.16.217.98:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CENliguUAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLwAAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/07/31,16:37:16 +2:00 GMT,192.168.2.109:58753,2.16.217.98:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CENligeUAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQIAAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
PE,2014/07/31,16:37:18 +2:00 GMT,SP Usage Sender,C:\Users\Nathalie94\AppData\Local\Temp\nssD580.exe,54.243.179.104:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nssD580.exe&Created=44f67b76&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/07/31,16:37:22 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\cmd.exe,800000dd,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe&ARG2=800000dd
OSFW,2014/07/31,16:37:22 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\cmd.exe,800000dd,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe&ARG2=800000dd
OSFW,2014/07/31,16:37:22 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENTHREAD,,C:\Windows\SysWOW64\cmd.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe
OSFW,2014/07/31,16:37:22 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENTHREAD,,C:\Windows\SysWOW64\cmd.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe
OSFW,2014/07/31,16:37:22 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENPROCESS,,C:\Windows\SysWOW64\cmd.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe
OSFW,2014/07/31,16:37:22 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENPROCESS,,C:\Windows\SysWOW64\cmd.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Ccmd.exe
OSFW,2014/07/31,16:37:22 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,800005e5,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=800005e5
OSFW,2014/07/31,16:37:22 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,800005e5,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=800005e5
OSFW,2014/07/31,16:37:24 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,800005e5,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=800005e5
OSFW,2014/07/31,16:37:24 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,SPAWNPROCESS,,c:\Windows\SysWOW64\sdbinst.exe,800005e5,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=c%3A%5CWindows%5CSysWOW64%5Csdbinst.exe&ARG2=800005e5
OSFW,2014/07/31,16:37:24 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENTHREAD,,c:\windows\SysWOW64\sdbinst.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=c%3A%5Cwindows%5CSysWOW64%5Csdbinst.exe
OSFW,2014/07/31,16:37:24 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENTHREAD,,c:\windows\SysWOW64\sdbinst.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=c%3A%5Cwindows%5CSysWOW64%5Csdbinst.exe
OSFW,2014/07/31,16:37:24 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENPROCESS,,c:\windows\SysWOW64\sdbinst.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=c%3A%5Cwindows%5CSysWOW64%5Csdbinst.exe
OSFW,2014/07/31,16:37:24 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,PROCESS,OPENPROCESS,,c:\windows\SysWOW64\sdbinst.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=c%3A%5Cwindows%5CSysWOW64%5Csdbinst.exe
OSFW,2014/07/31,16:37:24 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/07/31,16:37:24 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/07/31,16:37:24 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
OSFW,2014/07/31,16:37:24 +2:00 GMT,ALLOWED,Search Protect,C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp,REGISTRY,SETVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS,AppInit_Dlls,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=nsz81A0.tmp&Created=44ff84a2&Size=6824512&MD5=7f6b1c9c1e9b1b936b8a6c44e7588063&SKIMP=0aeb96b4381c41f92b8938087c065cd1&&CT=4012&EV=4&SUB=9&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS+NT%5CCURRENTVERSION%5CWINDOWS&ARG2=AppInit_Dlls
PE,2014/07/31,16:37:24 +2:00 GMT,Search Protect,C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe,184.72.217.85:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.10.61&FN=CltMngSvc.exe&Created=44f67b76&Size=2975168&MD5=fe11b14440be254f685acbb7fd62a966&SKIMP=65a7e2a894a98ee1050c4cf6861465ea&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/07/31,16:37:26 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Mozilla Firefox\firefox.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CMozilla+Firefox%5Cfirefox.exe
OSFW,2014/07/31,16:37:26 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Mozilla Firefox\firefox.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CMozilla+Firefox%5Cfirefox.exe
OSFW,2014/07/31,16:37:26 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Mozilla Firefox\firefox.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CMozilla+Firefox%5Cfirefox.exe
OSFW,2014/07/31,16:37:26 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Mozilla Firefox\firefox.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CMozilla+Firefox%5Cfirefox.exe
PE,2014/07/31,16:37:28 +2:00 GMT,Search Protect,C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe,23.209.176.11:443,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.10.61&FN=cltmngui.exe&Created=44f67b76&Size=3225536&MD5=ffe156d694dd7583948cb96dcfac5a3d&SKIMP=19f43c788b917f6532dfd4d41037f2c8&CRC=99557744&RIPA=&RP=47873&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:37:28 +2:00 GMT,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,23.209.176.11:443,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&CRC=2becb742&RIPA=&RP=47873&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/07/31,16:37:28 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENPROCESS,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=SPTool64.exe&Created=44f67b76&Size=1729984&MD5=b5f8de75260f7113d5191270cb557da9&SKIMP=2f968838972ef033102c22e044a6581a&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/07/31,16:37:28 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENPROCESS,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=SPTool64.exe&Created=44f67b76&Size=1729984&MD5=b5f8de75260f7113d5191270cb557da9&SKIMP=2f968838972ef033102c22e044a6581a&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/07/31,16:37:28 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENTHREAD,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=SPTool64.exe&Created=44f67b76&Size=1729984&MD5=b5f8de75260f7113d5191270cb557da9&SKIMP=2f968838972ef033102c22e044a6581a&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/07/31,16:37:28 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENTHREAD,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=SPTool64.exe&Created=44f67b76&Size=1729984&MD5=b5f8de75260f7113d5191270cb557da9&SKIMP=2f968838972ef033102c22e044a6581a&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/07/31,16:37:32 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,REGISTRY,SETVALUE,,HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN,Start Page,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=4007&EV=4&SUB=9&SEV=2&ARG1=HKCU%5CSOFTWARE%5CMICROSOFT%5CINTERNET+EXPLORER%5CMAIN&ARG2=Start+Page
OSFW,2014/07/31,16:37:32 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,REGISTRY,SETVALUE,,HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN,Start Page,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=4007&EV=4&SUB=9&SEV=2&ARG1=HKCU%5CSOFTWARE%5CMICROSOFT%5CINTERNET+EXPLORER%5CMAIN&ARG2=Start+Page
PE,2014/07/31,16:37:36 +2:00 GMT,SP Usage Sender,C:\Users\Nathalie94\AppData\Local\Temp\nsx20E5.exe,54.243.179.104:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nsx20E5.exe&Created=44f67b76&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:37:38 +2:00 GMT,SP Usage Sender,C:\Users\Nathalie94\AppData\Local\Temp\nsm2AE9.exe,54.243.179.104:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nsm2AE9.exe&Created=44f67b76&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
PE,2014/07/31,16:37:40 +2:00 GMT,SP Usage Sender,C:\Users\Nathalie94\AppData\Local\Temp\nsa3402.exe,184.72.217.85:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=SP+Usage+Sender&VER=1.0.0.0&FN=nsa3402.exe&Created=44f67b76&Size=156061&MD5=02c162fd7706e887624dfcc410979355&SKIMP=e78ebeb88ab81f92edecd3292d862a86&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
FWOUT,2014/07/31,17:01:30 +2:00 GMT,192.168.2.109:59458,2.16.217.138:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CENmKQugAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQL1AQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm

Nathalie · 19.08.2014, 20:09

Code:

ATTFilter

8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,17:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,17:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,17:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,17:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,17:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:20 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:22 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:22 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:11:24 +2:00 GMT,BLOCKED,Host Process for Windows Services,C:\Windows\System32\svchost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Services&VER=6.3.9600.16384&FN=svchost.exe&Created=431675a9&Size=37768&MD5=e4ca434f251681590d0538bc21c32d2f&SKIMP=4009bdf5332e1a6aca4cd25699341ba8&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/07/31,18:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:58 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:58 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:58 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:58 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:58 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:31:58 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:33:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:33:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:33:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:33:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:33:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:33:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:35:36 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:35:36 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:35:36 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:35:36 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:35:36 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,18:35:36 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
AV/update,2014/07/31,19:14:26 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1157587872
OSFW,2014/07/31,19:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,19:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,19:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,19:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,19:31:10 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/07/31,19:31:10 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
FWROUTE,2014/07/31,20:15:56 +2:00 GMT,192.168.2.109:65393,2.16.218.179:80,TCP (flags:AF),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CENqzcf8AAFAAAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARGwAwAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWROUTE,2014/07/31,20:15:56 +2:00 GMT,192.168.2.109:61391,157.55.236.95:443,TCP (flags:APF),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm2dN+xfz+8AALsBAAABAAAAAQAAAAIAAAABAAAAo4YBADAxMDIHBAIAAQANARk0BAAAAAAAAAAEQAAA//8Q+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/07/31,20:16:00 +2:00 GMT,192.168.2.109:0,224.0.0.22:0,IGMP (type:34),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm3gAAAWAAAAAAAAAAABAAAAAQAAAAQAAAABAAAAoYYBADAxMDIHBAIAAQAAAQDXAQAAIgAAAAABAAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         OSFW,2014/08/01,13:53:10 +2:00 GMT,UNKNOWN(0),smss.exe,C:\Windows\System32\smss.exe,PROCESS,OPENPROCESS,,C:\Windows\system32\svchost.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=smss.exe&VER=22.02.2014+17%3A43%3A04&FN=smss.exe&Created=44568d62&Size=142576&MD5=d8564418bac13776e43db5f6b4fa775e&SKIMP=cca51773d051d05a54a3408b99ef5b30&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5Csystem32%5Csvchost.exe
OSFW,2014/08/01,13:53:10 +2:00 GMT,ALLOWED,smss.exe,C:\Windows\System32\smss.exe,PROCESS,OPENPROCESS,,C:\Windows\system32\svchost.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=smss.exe&VER=22.02.2014+17%3A43%3A04&FN=smss.exe&Created=44568d62&Size=142576&MD5=d8564418bac13776e43db5f6b4fa775e&SKIMP=cca51773d051d05a54a3408b99ef5b30&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5Csystem32%5Csvchost.exe
OSFW,2014/08/01,13:53:44 +2:00 GMT,UNKNOWN(0),WMI Provider Host,C:\Windows\System32\wbem\WmiPrvSE.exe,DRIVER,LOAD,,WINDRVDIR\acpi.sys,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=WMI+Provider+Host&VER=6.3.9600.16384&FN=WmiPrvSE.exe&Created=43166da8&Size=478208&MD5=ce6d08350d0a1278e9a97d94023d1800&SKIMP=5492721e9d310a2edda7e4c4b4176874&&CT=3006&EV=7&SUB=17&SEV=3&ARG1=WINDRVDIR%5Cacpi.sys
OSFW,2014/08/01,13:53:44 +2:00 GMT,ALLOWED,WMI Provider Host,C:\Windows\System32\wbem\WmiPrvSE.exe,DRIVER,LOAD,,WINDRVDIR\acpi.sys,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=WMI+Provider+Host&VER=6.3.9600.16384&FN=WmiPrvSE.exe&Created=43166da8&Size=478208&MD5=ce6d08350d0a1278e9a97d94023d1800&SKIMP=5492721e9d310a2edda7e4c4b4176874&&CT=3006&EV=7&SUB=17&SEV=3&ARG1=WINDRVDIR%5Cacpi.sys
AV/update,2014/08/01,13:59:58 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1157715712
AV/scan,2014/08/01,14:05:06 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Auto,2101 files scanned (0 detections)
OSFW,2014/08/01,14:22:26 +2:00 GMT,UNKNOWN(0),smss.exe,C:\Windows\System32\smss.exe,PROCESS,OPENPROCESS,,C:\Windows\system32\svchost.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=smss.exe&VER=22.02.2014+17%3A43%3A04&FN=smss.exe&Created=44568d62&Size=142576&MD5=d8564418bac13776e43db5f6b4fa775e&SKIMP=cca51773d051d05a54a3408b99ef5b30&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5Csystem32%5Csvchost.exe
OSFW,2014/08/01,14:22:26 +2:00 GMT,ALLOWED,smss.exe,C:\Windows\System32\smss.exe,PROCESS,OPENPROCESS,,C:\Windows\system32\svchost.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=smss.exe&VER=22.02.2014+17%3A43%3A04&FN=smss.exe&Created=44568d62&Size=142576&MD5=d8564418bac13776e43db5f6b4fa775e&SKIMP=cca51773d051d05a54a3408b99ef5b30&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5Csystem32%5Csvchost.exe
OSFW,2014/08/01,14:22:46 +2:00 GMT,UNKNOWN(0),WMI Provider Host,C:\Windows\System32\wbem\WmiPrvSE.exe,DRIVER,LOAD,,WINDRVDIR\acpi.sys,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=WMI+Provider+Host&VER=6.3.9600.16384&FN=WmiPrvSE.exe&Created=43166da8&Size=478208&MD5=ce6d08350d0a1278e9a97d94023d1800&SKIMP=5492721e9d310a2edda7e4c4b4176874&&CT=3006&EV=7&SUB=17&SEV=3&ARG1=WINDRVDIR%5Cacpi.sys
OSFW,2014/08/01,14:22:46 +2:00 GMT,ALLOWED,WMI Provider Host,C:\Windows\System32\wbem\WmiPrvSE.exe,DRIVER,LOAD,,WINDRVDIR\acpi.sys,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=WMI+Provider+Host&VER=6.3.9600.16384&FN=WmiPrvSE.exe&Created=43166da8&Size=478208&MD5=ce6d08350d0a1278e9a97d94023d1800&SKIMP=5492721e9d310a2edda7e4c4b4176874&&CT=3006&EV=7&SUB=17&SEV=3&ARG1=WINDRVDIR%5Cacpi.sys
AV/scan,2014/08/01,14:31:48 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Auto,2116 files scanned (0 detections)
OSFW,2014/08/01,14:33:14 +2:00 GMT,UNKNOWN(0),Console Window Host,C:\Windows\System32\conhost.exe,PROCESS,OPENPROCESS,,C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Console+Window+Host&VER=6.3.9600.17031&FN=conhost.exe&Created=44565d87&Size=356864&MD5=3ca1ee5be6c9d92dd672fc5a09e17ae2&SKIMP=20d5dee0b433072d1bedb6bcea16979b&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CMicrosoft.NET%5CFramework64%5Cv4.0.30319%5CNGenTask.exe
OSFW,2014/08/01,14:33:14 +2:00 GMT,ALLOWED,Console Window Host,C:\Windows\System32\conhost.exe,PROCESS,OPENPROCESS,,C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NGenTask.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Console+Window+Host&VER=6.3.9600.17031&FN=conhost.exe&Created=44565d87&Size=356864&MD5=3ca1ee5be6c9d92dd672fc5a09e17ae2&SKIMP=20d5dee0b433072d1bedb6bcea16979b&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CMicrosoft.NET%5CFramework64%5Cv4.0.30319%5CNGenTask.exe
OSFW,2014/08/01,14:33:14 +2:00 GMT,UNKNOWN(0),Console Window Host,C:\Windows\System32\conhost.exe,PROCESS,OPENPROCESS,,C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Console+Window+Host&VER=6.3.9600.17031&FN=conhost.exe&Created=44565d87&Size=356864&MD5=3ca1ee5be6c9d92dd672fc5a09e17ae2&SKIMP=20d5dee0b433072d1bedb6bcea16979b&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CMicrosoft.NET%5CFramework%5Cv4.0.30319%5CNGenTask.exe
OSFW,2014/08/01,14:33:14 +2:00 GMT,ALLOWED,Console Window Host,C:\Windows\System32\conhost.exe,PROCESS,OPENPROCESS,,C:\Windows\Microsoft.NET\Framework\v4.0.30319\NGenTask.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Console+Window+Host&VER=6.3.9600.17031&FN=conhost.exe&Created=44565d87&Size=356864&MD5=3ca1ee5be6c9d92dd672fc5a09e17ae2&SKIMP=20d5dee0b433072d1bedb6bcea16979b&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CMicrosoft.NET%5CFramework%5Cv4.0.30319%5CNGenTask.exe
OSFW,2014/08/01,14:40:52 +2:00 GMT,UNKNOWN(0),Userinit Logon Application,C:\Windows\System32\userinit.exe,PROCESS,SPAWNPROCESS,,C:\Windows\explorer.exe,800004de,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Userinit+Logon+Application&VER=6.3.9600.16384&FN=userinit.exe&Created=43166067&Size=25088&MD5=08c191b2917862be90c33e31cb6b6d79&SKIMP=58e4e87ac97e61d0199eb2586cbc3029&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5Cexplorer.exe&ARG2=800004de
OSFW,2014/08/01,14:40:52 +2:00 GMT,ALLOWED,Userinit Logon Application,C:\Windows\System32\userinit.exe,PROCESS,SPAWNPROCESS,,C:\Windows\explorer.exe,800004de,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Userinit+Logon+Application&VER=6.3.9600.16384&FN=userinit.exe&Created=43166067&Size=25088&MD5=08c191b2917862be90c33e31cb6b6d79&SKIMP=58e4e87ac97e61d0199eb2586cbc3029&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5Cexplorer.exe&ARG2=800004de
OSFW,2014/08/01,14:40:56 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENPROCESS,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=SPTool64.exe&Created=44f67b76&Size=1729984&MD5=b5f8de75260f7113d5191270cb557da9&SKIMP=2f968838972ef033102c22e044a6581a&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/08/01,14:40:56 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,PROCESS,OPENPROCESS,,C:\Windows\Explorer.EXE,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=SPTool64.exe&Created=44f67b76&Size=1729984&MD5=b5f8de75260f7113d5191270cb557da9&SKIMP=2f968838972ef033102c22e044a6581a&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CWindows%5CExplorer.EXE
OSFW,2014/08/01,14:41:00 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,REGISTRY,SETVALUE,,HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN,Start Page,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=4007&EV=4&SUB=9&SEV=2&ARG1=HKCU%5CSOFTWARE%5CMICROSOFT%5CINTERNET+EXPLORER%5CMAIN&ARG2=Start+Page
OSFW,2014/08/01,14:41:00 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,REGISTRY,SETVALUE,,HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN,Start Page,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=4007&EV=4&SUB=9&SEV=2&ARG1=HKCU%5CSOFTWARE%5CMICROSOFT%5CINTERNET+EXPLORER%5CMAIN&ARG2=Start+Page
OSFW,2014/08/01,14:43:26 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:43:26 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:43:26 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:43:26 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:43:26 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:43:26 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
PE,2014/08/01,14:43:26 +2:00 GMT,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,54.231.16.188:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&CRC=f3882af1&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
OSFW,2014/08/01,14:54:38 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\delegate_execute.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5C36.0.1985.125%5Cdelegate_execute.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\delegate_execute.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5C36.0.1985.125%5Cdelegate_execute.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,14:54:38 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/01,15:26:50 +2:00 GMT,UNKNOWN(0),Google Update Setup,C:\Users\Nathalie94\AppData\Local\Temp\GUM3AC7.tmp\GoogleUpdateSetup.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\GUM80BA.tmp\GoogleUpdate.exe,80000518,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Google+Update+Setup&VER=1.3.24.15&FN=GoogleUpdateSetup.exe&Created=45017b4f&Size=895120&MD5=933d314120aab891d7a4986f0aac5fc1&SKIMP=c5f6e7f1f848056a78ce966eb69e3147&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGUM80BA.tmp%5CGoogleUpdate.exe&ARG2=80000518
OSFW,2014/08/01,15:26:50 +2:00 GMT,ALLOWED,Google Update Setup,C:\Users\Nathalie94\AppData\Local\Temp\GUM3AC7.tmp\GoogleUpdateSetup.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\GUM80BA.tmp\GoogleUpdate.exe,80000518,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Google+Update+Setup&VER=1.3.24.15&FN=GoogleUpdateSetup.exe&Created=45017b4f&Size=895120&MD5=933d314120aab891d7a4986f0aac5fc1&SKIMP=c5f6e7f1f848056a78ce966eb69e3147&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGUM80BA.tmp%5CGoogleUpdate.exe&ARG2=80000518
OSFW,2014/08/01,15:27:46 +2:00 GMT,UNKNOWN(0),Setup Launcher Unicode,C:\Users\Nathalie94\AppData\Local\Temp\._msige61\GoogleEarth.exe,REGISTRY,DELVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN,ISSetup,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Setup+Launcher+Unicode&VER=7.1.2.2041&FN=GoogleEarth.exe&Created=4347b048&Size=1207296&MD5=6a9b8d02c6ebf22ed5aeac9acf193967&SKIMP=e2ff8e01bfb4f2db764fcc00673c1d91&&CT=4004&EV=4&SUB=11&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS%5CCURRENTVERSION%5CRUN&ARG2=ISSetup
OSFW,2014/08/01,15:27:46 +2:00 GMT,ALLOWED,Setup Launcher Unicode,C:\Users\Nathalie94\AppData\Local\Temp\._msige61\GoogleEarth.exe,REGISTRY,DELVALUE,,HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN,ISSetup,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Setup+Launcher+Unicode&VER=7.1.2.2041&FN=GoogleEarth.exe&Created=4347b048&Size=1207296&MD5=6a9b8d02c6ebf22ed5aeac9acf193967&SKIMP=e2ff8e01bfb4f2db764fcc00673c1d91&&CT=4004&EV=4&SUB=11&SEV=2&ARG1=HKLM%5CSOFTWARE%5CMICROSOFT%5CWINDOWS%5CCURRENTVERSION%5CRUN&ARG2=ISSetup
OSFW,2014/08/01,15:27:46 +2:00 GMT,UNKNOWN(0),Setup Launcher Unicode,C:\Users\Nathalie94\AppData\Local\Temp\._msige61\GoogleEarth.exe,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\msiexec.exe,8000051d,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Setup+Launcher+Unicode&VER=7.1.2.2041&FN=GoogleEarth.exe&Created=4347b048&Size=1207296&MD5=6a9b8d02c6ebf22ed5aeac9acf193967&SKIMP=e2ff8e01bfb4f2db764fcc00673c1d91&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Cmsiexec.exe&ARG2=8000051d
OSFW,2014/08/01,15:27:46 +2:00 GMT,ALLOWED,Setup Launcher Unicode,C:\Users\Nathalie94\AppData\Local\Temp\._msige61\GoogleEarth.exe,PROCESS,SPAWNPROCESS,,C:\Windows\SysWOW64\msiexec.exe,8000051d,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Setup+Launcher+Unicode&VER=7.1.2.2041&FN=GoogleEarth.exe&Created=4347b048&Size=1207296&MD5=6a9b8d02c6ebf22ed5aeac9acf193967&SKIMP=e2ff8e01bfb4f2db764fcc00673c1d91&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSysWOW64%5Cmsiexec.exe&ARG2=8000051d
OSFW,2014/08/01,15:28:00 +2:00 GMT,UNKNOWN(0),Google Update,C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\Google\Update\GoogleUpdate.exe,8000051a,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Google+Update&VER=1.3.24.15&FN=GoogleUpdateOnDemand.exe&Created=44ff854e&Size=51080&MD5=956672375af066d958e4d07f5abafc1a&SKIMP=093061bd12ba3130bf4ecf1416604504&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CUpdate%5CGoogleUpdate.exe&ARG2=8000051a
OSFW,2014/08/01,15:28:00 +2:00 GMT,ALLOWED,Google Update,C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\Google\Update\GoogleUpdate.exe,8000051a,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Google+Update&VER=1.3.24.15&FN=GoogleUpdateOnDemand.exe&Created=44ff854e&Size=51080&MD5=956672375af066d958e4d07f5abafc1a&SKIMP=093061bd12ba3130bf4ecf1416604504&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CUpdate%5CGoogleUpdate.exe&ARG2=8000051a
PE,2014/08/01,15:28:06 +2:00 GMT,Google Earth,C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe,173.194.116.177:443,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=Google+Earth&VER=07.10.2013+21%3A52%3A18&FN=googleearth.exe&Created=4347ae89&Size=208384&MD5=479d8c124562f49c83fc9150635962e9&SKIMP=4aeb5d01a62f39f7cfca62112d99d9d6&CRC=7ca91de0&RIPA=&RP=47873&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
FWOUT,2014/08/01,16:29:50 +2:00 GMT,192.168.2.109:53940,2.16.62.113:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5xtNIAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQK5AQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/01,16:29:50 +2:00 GMT,192.168.2.109:53941,2.16.62.146:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED6StdIAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLSAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/01,16:29:50 +2:00 GMT,192.168.2.109:53945,2.16.62.137:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED6JudIAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQIoAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/01,17:02:04 +2:00 GMT,UNKNOWN(0),smss.exe,C:\Windows\System32\smss.exe,PROCESS,OPENTHREAD,,C:\Windows\system32\csrss.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=smss.exe&VER=22.02.2014+17%3A43%3A04&FN=smss.exe&Created=44568d62&Size=142576&MD5=d8564418bac13776e43db5f6b4fa775e&SKIMP=cca51773d051d05a54a3408b99ef5b30&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5Csystem32%5Ccsrss.exe
OSFW,2014/08/01,17:02:04 +2:00 GMT,ALLOWED,smss.exe,C:\Windows\System32\smss.exe,PROCESS,OPENTHREAD,,C:\Windows\system32\csrss.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=smss.exe&VER=22.02.2014+17%3A43%3A04&FN=smss.exe&Created=44568d62&Size=142576&MD5=d8564418bac13776e43db5f6b4fa775e&SKIMP=cca51773d051d05a54a3408b99ef5b30&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CWindows%5Csystem32%5Ccsrss.exe
FWOUT,2014/08/03,14:36:14 +2:00 GMT,192.168.2.109:54238,2.16.62.144:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED6Q3tMAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQL4BAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/03,14:36:14 +2:00 GMT,192.168.2.109:54239,209.87.211.136:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm3RV9OI39MAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQL4BAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/03,14:36:22 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,800004e0,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=CltMngSvc.exe&Created=44f67b76&Size=2975168&MD5=fe11b14440be254f685acbb7fd62a966&SKIMP=65a7e2a894a98ee1050c4cf6861465ea&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5Ccltmng.exe&ARG2=800004e0
OSFW,2014/08/03,14:36:22 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,800004e0,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=CltMngSvc.exe&Created=44f67b76&Size=2975168&MD5=fe11b14440be254f685acbb7fd62a966&SKIMP=65a7e2a894a98ee1050c4cf6861465ea&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5Ccltmng.exe&ARG2=800004e0
OSFW,2014/08/03,14:36:24 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
OSFW,2014/08/03,14:36:24 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
FWOUT,2014/08/03,14:37:22 +2:00 GMT,192.168.2.109:54518,188.111.53.57:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm28bzU59tQAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLiBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/update,2014/08/03,14:38:52 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1157827200
FWOUT,2014/08/04,15:55:16 +2:00 GMT,192.168.2.109:54956,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jrNYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQKxAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/04,15:57:48 +2:00 GMT,192.168.2.109:54984,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZyNYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJ8BAAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
OSFW,2014/08/04,15:57:48 +2:00 GMT,UNKNOWN(0),Windows Problem Reporting,C:\Windows\System32\wermgr.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\rundll32.exe,800004d4,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Windows+Problem+Reporting&VER=6.3.9600.17031&FN=wermgr.exe&Created=4456976d&Size=139464&MD5=88060469afd9de814caaf497922d3910&SKIMP=a715504fba1de7edcb30d23ceffd29a5&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Crundll32.exe&ARG2=800004d4
OSFW,2014/08/04,15:57:48 +2:00 GMT,ALLOWED,Windows Problem Reporting,C:\Windows\System32\wermgr.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\rundll32.exe,800004d4,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Windows+Problem+Reporting&VER=6.3.9600.17031&FN=wermgr.exe&Created=4456976d&Size=139464&MD5=88060469afd9de814caaf497922d3910&SKIMP=a715504fba1de7edcb30d23ceffd29a5&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Crundll32.exe&ARG2=800004d4
FWOUT,2014/08/04,15:58:56 +2:00 GMT,192.168.2.109:55065,2.16.62.99:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5jGdcAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQIjBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/scan,2014/08/04,16:01:52 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Auto,3322 files scanned (0 detections)
OSFW,2014/08/04,16:02:50 +2:00 GMT,UNKNOWN(0),hmmwwoblzz64.exe,C:\Program Files\003\hmmwwoblzz64.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\cmd.exe,80000029,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=hmmwwoblzz64.exe&VER=14.06.2014+17%3A33%3A12&FN=hmmwwoblzz64.exe&Created=44ce8c26&Size=709120&MD5=f3dac82f16a980b79c24b0d86b92400a&SKIMP=d15ecc86ade58f5433783138cfd16b2b&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Ccmd.exe&ARG2=80000029
OSFW,2014/08/04,16:02:50 +2:00 GMT,ALLOWED,hmmwwoblzz64.exe,C:\Program Files\003\hmmwwoblzz64.exe,PROCESS,SPAWNPROCESS,,C:\Windows\System32\cmd.exe,80000029,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=hmmwwoblzz64.exe&VER=14.06.2014+17%3A33%3A12&FN=hmmwwoblzz64.exe&Created=44ce8c26&Size=709120&MD5=f3dac82f16a980b79c24b0d86b92400a&SKIMP=d15ecc86ade58f5433783138cfd16b2b&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CWindows%5CSystem32%5Ccmd.exe&ARG2=80000029
AV/update,2014/08/04,16:04:16 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1157869216
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:18 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:15:20 +2:00 GMT,BLOCKED,Host Process for Windows Tasks,C:\Windows\System32\taskhost.exe,REGISTRY,SETKEY,,HKCS\SERVICES\VSDATANT,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Host+Process+for+Windows+Tasks&VER=6.3.9600.17031&FN=taskhost.exe&Created=44569052&Size=83120&MD5=3711306c8d1a859351d735d93090c1c0&SKIMP=89a45d2fd233f1874d2a16d2e69e34dd&&CT=2003&EV=4&SUB=10&SEV=3&ARG1=HKCS%5CSERVICES%5CVSDATANT
OSFW,2014/08/04,16:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/04,16:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/04,16:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/04,16:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/04,16:31:08 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
OSFW,2014/08/04,16:31:08 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENTHREAD,,C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6002&EV=1&SUB=2&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5Cchrome.exe
AV/scan,2014/08/04,16:55:08 +2:00 GMT,Mehrere Dateien,Prüfung abgeschlossen,Manuell,2601 files scanned (0 detections)
PE,2014/08/04,17:35:00 +2:00 GMT,globalUpdate Update,C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe,69.16.175.10:80,N/A,hxxp://pralerts.zonealarm.com/pralerts/pranalyze.jsp?PN=globalUpdate+Update&VER=1.3.25.0&FN=GoogleUpdate.exe&Created=44ce8bd8&Size=68608&MD5=d858ba2ee718b1db1ced20646e641d08&SKIMP=a82edfa7c8e5878300e5b24fdc2b66b4&&RIPA=&RP=20480&Connect=1&Pgmstatus=1&Zone=2&Keycode=j5hvqhisiu3s4he7bhx644bu4g0&Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=1&PU=1&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031
AV/update,2014/08/06,11:03:46 +2:00 GMT,,Update Install Completed,Auto,Updated to Version #1158002816
OSFW,2014/08/06,11:07:46 +2:00 GMT,UNKNOWN(0),Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
OSFW,2014/08/06,11:07:46 +2:00 GMT,ALLOWED,Search Protect,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe,PROCESS,SPAWNPROCESS,,C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe,800004ee,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=Search+Protect&VER=2.16.10.61&FN=cltmng.exe&Created=44f67b76&Size=5426112&MD5=f179d39cdc9c25f28f0a2510fc96266c&SKIMP=dd0592d9be662cd6e4e3029ff8ee3ebc&&CT=6003&EV=1&SUB=3&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CSearchProtect%5CSearchProtect%5Cbin%5CSPTool64.exe&ARG2=800004ee
OSFW,2014/08/06,11:07:56 +2:00 GMT,UNKNOWN(0),HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\delegate_execute.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5C36.0.1985.125%5Cdelegate_execute.exe
OSFW,2014/08/06,11:07:56 +2:00 GMT,ALLOWED,HD-V1.3 exe,C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe,PROCESS,OPENPROCESS,,C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\delegate_execute.exe,hxxp://osalerts.zonealarm.com/osanalyze.jsp?Product=ZoneAlarm&ProductVersion=13.2.15.0&HU100=ZLN37738535391223-1001&CL=de&OEM=1001&SKU=0&Mode=6&QSRC=2&OS=Windows+8.1+x64-6.3.9600--SMP&LANG=1031&PN=HD-V1.3+exe&VER=1000.1000.1000.1000&FN=HD-V1.3-nova.exe&Created=44ce8be2&Size=595264&MD5=8d5aad877747131dec22bbe0ae90605f&SKIMP=a160919b89e2d3c5e07008fd232504a6&&CT=6001&EV=1&SUB=1&SEV=3&ARG1=C%3A%5CProgram+Files+(x86)%5CGoogle%5CChrome%5CApplication%5C36.0.1985.125%5Cdelegate_execute.exe
FWOUT,2014/08/06,11:08:20 +2:00 GMT,192.168.2.109:64944,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZsP0AAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLlBQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
AV/treatment,2014/08/06,12:32:20 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsa3402.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:32:20 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsbC477.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:32:20 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nskCD71.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:32:20 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsm2AE9.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:32:20 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nssD580.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:32:20 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsx20E5.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:08 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsm1B38.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:10 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsgA740.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:10 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsoADC9.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:10 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nsaE42E.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:10 +2:00 GMT,not-a-virus:WebToolbar.NSIS.Agent.k,C:\Users\Nathalie94\AppData\Local\Temp\nssEA59.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:16 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:16 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:16 +2:00 GMT,not-a-virus:Downloader.NSIS.Agent.ji,C:\Users\Nathalie94\AppData\Local\Temp\n2679\systemspeedup_1203-72c8223c.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:24 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:37:24 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:00 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:02 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:12 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:12 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:12 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:14 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:14 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:14 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:14 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:14 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
AV/treatment,2014/08/06,12:40:14 +2:00 GMT,not-a-virus:Downloader.Win32.Solimba.a,C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe,Skipped by settings,Auto
FWOUT,2014/08/06,13:00:38 +2:00 GMT,192.168.2.109:56343,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZF9wAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQIiAwAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/06,14:17:52 +2:00 GMT,192.168.2.109:59616,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5Z4OgAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQJgAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/06,17:01:02 +2:00 GMT,192.168.2.109:61782,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZVvEAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLtBgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/06,17:07:54 +2:00 GMT,192.168.2.109:61868,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZrPEAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLGAgAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/06,17:35:34 +2:00 GMT,192.168.2.109:62453,2.16.62.17:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED4R9fMAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLrBQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm
FWOUT,2014/08/06,18:47:16 +2:00 GMT,192.168.2.109:63108,2.16.62.89:80,TCP (flags:S),hxxp://fwalerts.zonealarm.com/fwalerts/fwanalyze.jsp?V103=AcCoAm0CED5ZhPYAAFAAAAABAAAAAQAAAAIAAAABAAAAoYYBADAxMDIHBAIAAQANAQLJAQAAAAAAAAABQAAA//8B+ZLN37738535391223-1001,,,,Windows+8.1+x64-6.3.9600--SMP,13.2.15.0,ExtBlockAll2,j5hvqhisiu3s4he7bhx644bu4g0,2,,&CL=de&OEM=1001&SKU=0&Mode=6&Product=ZoneAlarm

schrauber · 20.08.2014, 10:55

Adware & Co. deinstallieren

Lade Dir bitte von hier Revo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:

diesen Zusatz haben:
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Nathalie · 21.08.2014, 19:52

Hallo Schrauber,

Hier die Logs von den gewünschten Programmen. Bei Revo hat es keine Programme angezeigt mit dem Zusatz Attention, dies könnte auch daran liegen, dass der PC erst 3 Monate alt ist und so gut wie keine Programme installiert sind.

ADW Cleaner log files:

Code:

ATTFilter

# AdwCleaner v3.307 - Bericht erstellt am 21/08/2014 um 19:50:41
# Aktualisiert 17/08/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Nathalie94 - NATHALIE
# Gestartet von : C:\Users\Nathalie94\Downloads\adwcleaner_3.307.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : netfilter64

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Program Files (x86)\FLVM Player
Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
Ordner Gelöscht : C:\Program Files (x86)\predm
Ordner Gelöscht : C:\Windows\Installer\{8E53C5B6-1DB1-4859-A731-17F17EBB8B71}
Ordner Gelöscht : C:\Program Files\003
Ordner Gelöscht : C:\Users\Nathalie94\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\NATHAL~1\AppData\Local\Temp\mt_ffx
Ordner Gelöscht : C:\Users\Nathalie94\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Nathalie94\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player
Ordner Gelöscht : C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\Extensions\staged\ffxtlbr@zonealarm.com
Datei Gelöscht : C:\Windows\System32\drivers\netfilter64.sys
Datei Gelöscht : C:\Windows\System32\GroupPolicy\Machine\Registry.pol
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Nathalie94\AppData\Roaming\aps.uninstall.scan.results
Datei Gelöscht : C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\searchplugins\zonealarm.xml
Datei Gelöscht : C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\user.js

***** [ Tasks ] *****

Task Gelöscht : APSnotifierPP1
Task Gelöscht : APSnotifierPP2
Task Gelöscht : APSnotifierPP3

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk
Verknüpfung Desinfiziert : C:\Users\Nathalie94\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Nathalie94\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Nathalie94\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{B1BBD911-3790-42DA-9474-B0F32459C4C7}]
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Download Protect]
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\SecuredDownload
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Tutorials
Schlüssel Gelöscht : HKLM\SOFTWARE\Wpm
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Mozilla Firefox v31.0 (x86 de)

[ Datei : C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\prefs.js ]


-\\ Google Chrome v36.0.1985.143

[ Datei : C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : bakijjialdiiboeaknfpmflphhmljfkd
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb

*************************

AdwCleaner[R0].txt - [12342 octets] - [21/08/2014 19:48:35]
AdwCleaner[S0].txt - [11357 octets] - [21/08/2014 19:50:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11418 octets] ##########

Mbam logfiles musste ich aufteilen, da sie die maximale Postgröße überschreiten. Hier Teil 1

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 20.08.2014
Suchlauf-Zeit: 23:41:01
Logdatei: mbam2.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.20.08
Rootkit Datenbank: v2014.08.16.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Nathalie94

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 303526
Verstrichene Zeit: 22 Min, 27 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 2
PUP.Optional.SupraSavings.A, C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe, 2276, Löschen bei Neustart, [ffd99038aad19b9bee08a1a7c440f40c]
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe, 5616, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4]

Module: 1
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.dll, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 

Registrierungsschlüssel: 89
PUP.Optional.SearchProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CltMngSvc, In Quarantäne, [c4145e6a86f5d06649f808905ca5817f], 
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, In Quarantäne, [02d66f59790295a1409f3f2f4cb64bb5], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [c21678502d4efe38c7a22f79a45ec13f], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [72667454017a90a62fcee7c0f0128d73], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{af16abf4-eac1-49b4-93fc-58f6ca799135}w64, In Quarantäne, [f6e25d6b3a414ee863984cfcce3638c8], 
PUP.Optional.CouponDownloader.A, HKLM\SOFTWARE\Coupon Downloader, In Quarantäne, [4e8a06c2196263d3ebd67d7f24def808], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, In Quarantäne, [04d43791e59693a363798b8807fc0ff1], 
PUP.Optional.AdPeak.A, HKLM\SOFTWARE\LevelQualityWatcher, In Quarantäne, [f2e6ab1d85f6d85e59f629c6be44db25], 
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\Supra Savings, In Quarantäne, [8c4c9d2b94e7a294a9cb44aa3cc6d030], 
PUP.Optional.SupraSavings, HKLM\SOFTWARE\suprasavings, In Quarantäne, [b3259a2e80fb51e5aa228860788a0bf5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.BHO, In Quarantäne, [cc0c983068130135a10a915815ed07f9], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.BHO.1, In Quarantäne, [597fd5f3e2994de943688465c73ba45c], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.Sandbox, In Quarantäne, [4d8b19affa815bdb1893dd0cca3842be], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.Sandbox.1, In Quarantäne, [56828741a8d3c3736c3fbb2ea85af20e], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, In Quarantäne, [ac2c6a5ee794e452df40de60bf450bf5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, In Quarantäne, [964255734e2d280edcb11cea62a19967], 
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [95431daba0db45f14082eb49b0542dd3], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe, In Quarantäne, [56827454c9b23afc84ced61532d0629e], 
PUP.Optional.FreeSoftToday.A, HKLM\SOFTWARE\WOW6432NODE\FREE_SOFT_TODAY, In Quarantäne, [4395a3252a515dd9e85b202ba85c619f], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD-V1.3, In Quarantäne, [a830d2f681facc6a61500ee55ba7ea16], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [8751ccfcee8d2c0a508c31e206fd29d7], 
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\omiga-plusSoftware, In Quarantäne, [22b622a63a41ab8bec442a1743c1f907], 
PUP.Optional.SupraSavings, HKLM\SOFTWARE\WOW6432NODE\SupraSavings, In Quarantäne, [5f7964649eddc5714c809b4db54d0ff1], 
PUP.Optional.WindowsProtectManger.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsProtectManger, In Quarantäne, [38a0cdfb4b3056e098e3e00e60a20ff1], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.BHO, In Quarantäne, [894f7355abd0d264505b3eab23dfed13], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.BHO.1, In Quarantäne, [974186427ffcf93d307b03e637cb18e8], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.Sandbox, In Quarantäne, [35a36068007b0b2b406b49a01de56b95], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.Sandbox.1, In Quarantäne, [12c66365611aa78fa3086d7cfc066799], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, In Quarantäne, [0acea028740739fdbb6406385ea6847c], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [c90f18b04b30d6603e229952e61cd22e], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\19979, In Quarantäne, [a5333f892952e254800df51157ac3ac6], 
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [e8f0992f0378ef47566c7abac83c2cd4], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe, In Quarantäne, [08d0d4f4255648eea2b0b03b4cb6f30d], 
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsProtectManger, In Quarantäne, [6c6c9434097238fe10b548a94cb6867a], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [37a1c9ffc1bae1551157262643c16d93], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [d20607c1bfbc69cd75f47cd0fc087a86], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT, In Quarantäne, [3b9d765257240432245a0fe09b67be42], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, In Quarantäne, [4e8a3d8b2358f046d0f828bac63cdd23], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [34a4f1d70378d85eb349a73b639f0bf5], 
PUP.Optional.SupraSavings.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SupraSavingsService64, In Quarantäne, [ffd99038aad19b9bee08a1a7c440f40c], 
PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD, In Quarantäne, [f8e0face4f2ce4523e7cdb0d7b87bb45], 
PUP.Optional.CouponDownloader.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Coupon Downloader, In Quarantäne, [f9dfbc0ca7d4a78fd8eb2ecead55a858], 
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.3, In Quarantäne, [f3e55672ee8d3204e0cfe40f0cf65aa6], 
PUP.Optional.SupraSavings.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, In Quarantäne, [cc0c22a68fecad89f71038cc0ff4ed13], 
PUP.Optional.ViewPassword.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ViewPassword, In Quarantäne, [67718d3b6219ae886a39d91757ab916f], 
PUP.Optional.FreeSoftToday.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\freesofttoday, In Quarantäne, [5a7eb8107308da5c3b075cef32d250b0], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, In Quarantäne, [f6e2ecdc72099e98514ce26a37cd27d9], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [498f7f49631874c286e798a5ab59a25e], 
PUP.Optional.PlusHD.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.3, In Quarantäne, [ffd99a2e255654e2743b0fe4c042916f], 
PUP.Optional.SupraSavings.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, In Quarantäne, [07d101c70e6d1b1bb651e51f41c2f709], 
PUP.Optional.ViewPassword.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ViewPassword, In Quarantäne, [d503e9df85f65adc1c874ca448ba2bd5], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [993fad1b6f0cdd5931b6ae6423e0e917], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [76625573314a96a036e407222ed6c43c], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, In Quarantäne, [657314b4651662d4cdb84b9abf43768a], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\PlusHDv1.3, In Quarantäne, [eeeab90f403bed49ae78a73ced15b050], 
PUP.Optional.Ciuvo.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, In Quarantäne, [b22691377dfe0c2a76c211dee9198e72], 
PUP.Optional.SuperFish.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, In Quarantäne, [3b9d5f6932493afc44f3faf5c0427b85], 
PUP.Optional.Qone8, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [7d5bf5d30b704beb5b66a78db84c4eb2], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544834460}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555835560}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566836660}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555835560}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566836660}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544834460}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522832260}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220522832260}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511831160}\INPROCSERVER32, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HD-V1.3, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 

Registrierungswerte: 11
PUP.Optional.Iminent.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [72667454017a90a62fcee7c0f0128d73], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [88504b7dbfbcd85ea954fcabd13116ea], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [c90f18b04b30d6603e229952e61cd22e]
PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|fst_de_46, In Quarantäne, [8b4d963294e7a78f693de31cb54de31d], 
PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|fst_de_48, In Quarantäne, [4593bc0ca5d61d19970fcc333fc318e8], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT|InstallDir, C:\PROGRA~2\SearchProtect, In Quarantäne, [3b9d765257240432245a0fe09b67be42]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, In Quarantäne, [4e8a3d8b2358f046d0f828bac63cdd23]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tt4u, In Quarantäne, [34a4f1d70378d85eb349a73b639f0bf5]
PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD|ImagePath, \??\C:\Windows\system32\drivers\SPPD.sys, In Quarantäne, [f8e0face4f2ce4523e7cdb0d7b87bb45]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 1V2X1Q1R1M1F, In Quarantäne, [76625573314a96a036e407222ed6c43c]
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PriceMeterW, "C:\Users\Nathalie94\AppData\Local\PriceMeter\pricemeterw.exe", In Quarantäne, [96420fb9b9c252e489176d8a5fa35aa6]

Registrierungsdaten: 16
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC64~1.DLL, Gut: (), Schlecht: (C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC64~1.DLL),Ersetzt,[657315b39be0ad8911302d6b2fd2639d]
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL, Gut: (), Schlecht: (C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL),Ersetzt,[e4f43395e893ec4a4ef3900856abbf41]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[5e7a77519ae1d95d3cb6b01e0afaa957]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[b325794f7605b383f7fdf9d515ef837d]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[518725a34f2c38fed1221db1bb49ae52]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[538528a02a51a6906a8b9b33d0348d73]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[defa23a56f0c90a6b345636b5ba94cb4]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[b4246068b5c60432c0dfb722a65e0df3]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[32a6c602710ad066ba3805c9c3417090]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[6a6ed1f799e24fe7c430a628689c09f7]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[25b37a4e90ebeb4b01f21fafa95b7789]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[e6f2eeda512af14542b3e4ea867ee51b]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[b7212a9eb0cbab8b23d5a925d03454ac]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[a830f7d12853ab8bc8d7eced986cf20e]
PUP.Optional.Trovi.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=55&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&SSPV=, Gut: (www.google.com), Schlecht: (hxxp://www.trovi.com/?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=55&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&SSPV=),Ersetzt,[d305f6d27308171f59876866b54f6997]
PUP.Optional.ISearch.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[dcfc794f8bf04aeceee516b85ca8b24e]

Ordner: 108
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\rep, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\rep, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.Iminent.A, C:\Users\Nathalie94\AppData\Local\Temp\Iminent, In Quarantäne, [7266c40485f6b97da7eb2299e71b7c84], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\defaults, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\defaults\preferences, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\userCode, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\locale, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\locale\en-US, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.PriceMeter.A, C:\Users\Nathalie94\AppData\Local\PriceMeter, In Quarantäne, [9a3e56725d1eba7caaab14aedf2357a9], 
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings, In Quarantäne, [c5135b6d235848ee12e6635fb44e37c9], 
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SSL, In Quarantäne, [c5135b6d235848ee12e6635fb44e37c9], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, In Quarantäne, [e4f476522b5042f49da4a03129d95ba5], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [e4f476522b5042f49da4a03129d95ba5], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect, Löschen bei Neustart, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect, Löschen bei Neustart, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\STG, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\UI, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\UI\rep, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\userCode, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\actions, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\popupResource, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\databases\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0, Löschen bei Neustart, [6d6bcafef08bc86e5ded448df60c09f7], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\log, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\update, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Managera.A, C:\Users\Nathalie94\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42, In Quarantäne, [9d3b0dbb601b4aecb2f3c310828043bd], 
PUP.Optional.SystemSpeedup, C:\Users\Nathalie94\AppData\Roaming\systweak\ssd, In Quarantäne, [edeb6f593b4040f6055103d138ca6a96], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{522A9285-0F80-4D42-BC73-5A5CAAB3F16D}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Users\Nathalie94\AppData\Roaming\SupTab, In Quarantäne, [a434c008106be94d4b88a3369a68d828], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\defaults, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\defaults\preferences, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\userCode, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\locale, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\locale\en-US, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 

Dateien: 579
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe, Löschen bei Neustart, [c4145e6a86f5d06649f808905ca5817f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe, Löschen bei Neustart, [83554f793f3c8caa85bc2d6b21e0cf31], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe, Löschen bei Neustart, [b721a523b6c5d4627fc225732bd6ed13], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll, Löschen bei Neustart, [54846f59bfbc6bcbb78a3a5e2dd4ef11], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll, In Quarantäne, [657315b39be0ad8911302d6b2fd2639d], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll, In Quarantäne, [e4f43395e893ec4a4ef3900856abbf41], 
PUP.Optional.AdPeak.A, C:\temp\InstallFilter64.msi, In Quarantäne, [c1173494423939fd30712c113fc1ac54], 
PUP.Optional.SupraSavings.A, C:\temp\t.msi, In Quarantäne, [5b7d1cacfa8170c69641d6e364a08e72], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsbC477.exe, In Quarantäne, [c117a02880fb122459c17d11c53c56aa], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsgA740.exe, In Quarantäne, [14c47a4e5c1f60d6fa20f9955fa2a65a], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nskCD71.exe, In Quarantäne, [b2264a7eee8dff37e832eca2d031ae52], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsm1B38.exe, In Quarantäne, [4a8e07c1d9a2a88ef02a8e006c95817f], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsm2AE9.exe, In Quarantäne, [f5e3deea83f89f9721f92569b64bad53], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsoADC9.exe, In Quarantäne, [3a9e0abea4d74ee81bff513dd62b49b7], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nssD580.exe, In Quarantäne, [597f34940675b680d842f6985ba6639d], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nssEA59.exe, In Quarantäne, [dcfc38900d6e55e1da40f5990ff2b947], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsx20E5.exe, In Quarantäne, [03d5e7e1fd7e8bab0812543abf425fa1], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp, In Quarantäne, [30a866623942d066251cd7c1c8393bc5], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe, In Quarantäne, [10c834946d0e41f5d071316717ea45bb], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsaE42E.exe, In Quarantäne, [cf09d6f2c8b3290de436226cfb0613ed], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsa3402.exe, In Quarantäne, [894fb8103b403303fc1e741ade23d52b], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\Temp\nsoF0DF\SpSetup.exe, In Quarantäne, [cc0cb3156219b284a39e465217ead42c], 
PUP.Optional.GenericExt.A, C:\Users\Nathalie94\AppData\Local\Temp\igdhbblpcellaljokkpfhcjlagemhgjl6263\minibarchrome.exe, In Quarantäne, [b72160684536181ea2c1a19c837d7789], 
PUP.Optional.BundleInstaller.A, C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe, In Quarantäne, [726613b56e0dad89d6e34106ed1345bb], 
PUP.Optional.FreeSoftToday.A, C:\Users\Nathalie94\AppData\Local\Temp\n2679\fst_de_1806-c280804b.exe, In Quarantäne, [a038a6226b10ea4c3492a4ef4eb3f60a], 
PUP.Optional.Iminent.A, C:\Users\Nathalie94\AppData\Local\Temp\n2679\Iminent_1712-b2fcad5e.exe, In Quarantäne, [17c1379164179d99b9267ad58f727090], 
PUP.Optional.BundleInstaller.A, C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe, In Quarantäne, [d8004583fc7f201607b23f08ae52629e], 
PUP.Optional.Babylon, C:\Users\Nathalie94\AppData\Local\Temp\n2679\systemspeedup_1203-72c8223c.exe, In Quarantäne, [63753593d0ab95a1eff3961817ea42be], 
PUP.Optional.SupraSavings, C:\Windows\Temp\6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe, In Quarantäne, [00d8e4e43249c076b1dd74531fe512ee], 
PUP.Optional.Conduit.A, C:\Windows\Temp\nsfC400.exe, In Quarantäne, [479121a7accf3ff726f4503eb150bb45], 
PUP.Optional.Conduit.A, C:\Windows\Temp\nsrA183.exe, In Quarantäne, [86522d9b85f638fe36e4fc9213ee26da], 
PUP.Optional.Breitschopp, C:\Users\Nathalie94\Downloads\DLG_chrome_browser_de-DE.exe, In Quarantäne, [18c074542259f244c85de4d46e96e21e], 
PUP.Optional.BundleInstaller.A, C:\Users\Nathalie94\Downloads\flashplayerpro-setup.exe, In Quarantäne, [a2362e9a87f4da5c41203b0d936d27d9], 
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\SPVCLdr64.dll, In Quarantäne, [f3e54c7cc7b4f541a39e6d2b867b8f71], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1, In Quarantäne, [1bbd5276e992a2941a4136b5f01237c9], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11, In Quarantäne, [a6321cac5f1c7fb760fb06e545bdcd33], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2, In Quarantäne, [b028ecdcc5b6251182d9b2398d75bf41], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3, In Quarantäne, [5a7ecbfdd5a625110e4db8338c7658a8], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4, In Quarantäne, [f0e823a57ffcf24471eab2398979ed13], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5, In Quarantäne, [c216d7f1daa1cd699ac1feed13efaf51], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6, In Quarantäne, [32a64e7a6615e6503c1fe209b84a748c], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7, In Quarantäne, [7167a4240576b383e972c625bf43b050], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0.localstorage, Löschen bei Neustart, [aa2e329656256bcbd9dc1ad8f1116e92], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0.localstorage-journal, In Quarantäne, [98401aae552622141e97b33fb74b01ff], 
PUP.Optional.Ciuvo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_api.ciuvo.com_0.localstorage, In Quarantäne, [25b3646409720f27faf652a15ba77b85], 
PUP.Optional.Ciuvo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_api.ciuvo.com_0.localstorage-journal, In Quarantäne, [b622b414abd050e6816f8c6724debf41], 
PUP.Optional.BetterDeals.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, Löschen bei Neustart, [c3151aae43383501bef240b54bb7af51], 
PUP.Optional.BetterDeals.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, Löschen bei Neustart, [7f59418790ebe353a60ad52041c157a9], 
PUP.Optional.SelectNGo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, Löschen bei Neustart, [894fa523542778bee3b4ba3da959f40c], 
PUP.Optional.SelectNGo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, Löschen bei Neustart, [fbdd2a9e1d5e5ed815826f88f012f20e], 
PUP.Optional.LiveLyrics.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage, In Quarantäne, [ca0e9137eb9071c56a7d8870d52dc739], 
PUP.Optional.LiveLyrics.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage-journal, In Quarantäne, [c414a52380fb1c1a3ea939bfd0326d93], 
PUP.Optional.Trovi.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\searchplugins\trovi-search.xml, In Quarantäne, [d0088b3dd4a7999d9e49b8427e84c13f], 
PUP.Optional.Superfish.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_www.superfish.com_0.localstorage, Löschen bei Neustart, [af2933950972a591806a52a8659d26da], 
PUP.Optional.Superfish.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_www.superfish.com_0.localstorage-journal, In Quarantäne, [c612b90f57241c1ac9213ebcc43ebf41], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\EULA.txt, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{af16abf4-eac1-49b4-93fc-58f6ca799135}w64.sys, In Quarantäne, [f6e25d6b3a414ee863984cfcce3638c8], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1.job, In Quarantäne, [cc0c0fb9fc7ff64015c861e8f4100af6], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11.job, In Quarantäne, [f9df3d8b2d4eb185edf0fc4dc53fd729], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2.job, In Quarantäne, [5484af193d3ec175b22b6ddc48bcaa56], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3.job, In Quarantäne, [24b4f0d8116a8ea8dd00262342c206fa], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4.job, In Quarantäne, [8b4d3593b8c3e650716c0445e51fd32d], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5.job, In Quarantäne, [637503c57ffcbb7b706d5fea7c889f61], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6.job, In Quarantäne, [b3257652710ac0766b725ced689ca45c], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7.job, In Quarantäne, [7c5cbf0991ea83b39b42c6833ec6e11f], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [51875a6ee9928fa7b43f80c94fb527d9], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [8256bb0d7ffc1c1ac62e71d8e024be42], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [9b3dad1bc8b353e3af463a0f51b35ea2], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [56823494f784eb4b80764dfc8d7749b7], 
PUP.Optional.SupraSavings.A, C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe, Löschen bei Neustart, [ffd99038aad19b9bee08a1a7c440f40c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome.manifest, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\install.rdf, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\2174a48913367074082d9b8c133a2661.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\69f2385f3545d6a4fdf733c53addf489.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\77fd6878acbf00a401e2b68bad6f9661.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\7c71cb1bcaadb8f5d4fa3851233b8b0d.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\background.html, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\browser.xul, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\c8f4d46f47f8c638b16fb0a4060803b6.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\dialog.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\options.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\options.xul, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\search_dialog.xul, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\a793669c44ef0bb705f7adac5b8aa826.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\0d06ba473f35e996609e935942094851.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\151be1836ef23dd27822437b7de1d588.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\1548f0ffb18af4ab4ce3c00be1092530.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\3d10bf46fff9e997b44096d7d3855069.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\62f48137a80b396b4e91be953e09ace5.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\74d5d296a02e9152902513b5a6bfcfbd.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\806b5d5309537e25d913cd14132d7535.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\93d1ea88141db1b65de05aa05409a75f.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\ba28358b7811a78203a46ebf7fa1e506.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\c9c1ff00a91082fd6f21116c8314f73a.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\cf065bbd98da35640a111ae42f2ee2f7.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\db98e7b3d4339295f99858d49f395eee.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\e515d695195d02a13b353ccb71ecadcb.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\e75edfedc58c113efc4f9d88eaf20206.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\f785d646b6e59274907be69a63a198cf.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\012b8dea5b7fccbf7e2cd3bbca35a9bf.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\10d1cf15490f5b08e8a58a795eecd10e.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\2d63dc955bf46e18d00e833e9bdf2090.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\3330e469c36ad1ed713e63daed021cc5.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\44e0da83e462830524ea27ff412d78bc.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\4ec2a02e285814495d99ec86efa76389.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\509d211a5abca65efb654a01fbf5fd57.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\602a3de27efbc918f2da5cf96199d4c6.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\60f7195ad3ce16f8ac071123f87fa38b.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\7579a2dd8a8945376df1b97ca76399b1.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\7febf301d5773fdc5469638f84e3b123.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\88e2d6dca834df6a256dcdca58c5f283.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\995ee845a7fd79f49fc4c27d8cb48d85.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\9db3b10370a134bc836212ea9bceebe5.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\a032c0e12c234e15f1006f4089df24bf.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\c5470289a0757eb481d66d0d3038e355.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\cd9d66f13871ed215499beb49f00c809.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\d4e8ec766b0a932ce08726f22bc39bca.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\f4421750bc1883f2db568f4b216b70f1.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\fe0163851606ec21b2406d5ed7f4ae2f.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\installer.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\defaults\preferences\prefs.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\manifest.xml, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins.json, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\220.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\1.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\102.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\104.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A,

Nathalie · 21.08.2014, 19:53

Mbam logfiles musste ich aufteilen, da sie die maximale Postgröße überschreiten. Hier Teil 1

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 20.08.2014
Suchlauf-Zeit: 23:41:01
Logdatei: mbam2.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.08.20.08
Rootkit Datenbank: v2014.08.16.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Nathalie94

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 303526
Verstrichene Zeit: 22 Min, 27 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 2
PUP.Optional.SupraSavings.A, C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe, 2276, Löschen bei Neustart, [ffd99038aad19b9bee08a1a7c440f40c]
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe, 5616, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4]

Module: 1
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.dll, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 

Registrierungsschlüssel: 89
PUP.Optional.SearchProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CltMngSvc, In Quarantäne, [c4145e6a86f5d06649f808905ca5817f], 
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, In Quarantäne, [02d66f59790295a1409f3f2f4cb64bb5], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [c21678502d4efe38c7a22f79a45ec13f], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [72667454017a90a62fcee7c0f0128d73], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{af16abf4-eac1-49b4-93fc-58f6ca799135}w64, In Quarantäne, [f6e25d6b3a414ee863984cfcce3638c8], 
PUP.Optional.CouponDownloader.A, HKLM\SOFTWARE\Coupon Downloader, In Quarantäne, [4e8a06c2196263d3ebd67d7f24def808], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, In Quarantäne, [04d43791e59693a363798b8807fc0ff1], 
PUP.Optional.AdPeak.A, HKLM\SOFTWARE\LevelQualityWatcher, In Quarantäne, [f2e6ab1d85f6d85e59f629c6be44db25], 
PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\Supra Savings, In Quarantäne, [8c4c9d2b94e7a294a9cb44aa3cc6d030], 
PUP.Optional.SupraSavings, HKLM\SOFTWARE\suprasavings, In Quarantäne, [b3259a2e80fb51e5aa228860788a0bf5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.BHO, In Quarantäne, [cc0c983068130135a10a915815ed07f9], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.BHO.1, In Quarantäne, [597fd5f3e2994de943688465c73ba45c], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.Sandbox, In Quarantäne, [4d8b19affa815bdb1893dd0cca3842be], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058360.Sandbox.1, In Quarantäne, [56828741a8d3c3736c3fbb2ea85af20e], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, In Quarantäne, [ac2c6a5ee794e452df40de60bf450bf5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, In Quarantäne, [964255734e2d280edcb11cea62a19967], 
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [95431daba0db45f14082eb49b0542dd3], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe, In Quarantäne, [56827454c9b23afc84ced61532d0629e], 
PUP.Optional.FreeSoftToday.A, HKLM\SOFTWARE\WOW6432NODE\FREE_SOFT_TODAY, In Quarantäne, [4395a3252a515dd9e85b202ba85c619f], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD-V1.3, In Quarantäne, [a830d2f681facc6a61500ee55ba7ea16], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [8751ccfcee8d2c0a508c31e206fd29d7], 
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\omiga-plusSoftware, In Quarantäne, [22b622a63a41ab8bec442a1743c1f907], 
PUP.Optional.SupraSavings, HKLM\SOFTWARE\WOW6432NODE\SupraSavings, In Quarantäne, [5f7964649eddc5714c809b4db54d0ff1], 
PUP.Optional.WindowsProtectManger.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsProtectManger, In Quarantäne, [38a0cdfb4b3056e098e3e00e60a20ff1], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.BHO, In Quarantäne, [894f7355abd0d264505b3eab23dfed13], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.BHO.1, In Quarantäne, [974186427ffcf93d307b03e637cb18e8], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.Sandbox, In Quarantäne, [35a36068007b0b2b406b49a01de56b95], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0058360.Sandbox.1, In Quarantäne, [12c66365611aa78fa3086d7cfc066799], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, In Quarantäne, [0acea028740739fdbb6406385ea6847c], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [c90f18b04b30d6603e229952e61cd22e], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\19979, In Quarantäne, [a5333f892952e254800df51157ac3ac6], 
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [e8f0992f0378ef47566c7abac83c2cd4], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe, In Quarantäne, [08d0d4f4255648eea2b0b03b4cb6f30d], 
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsProtectManger, In Quarantäne, [6c6c9434097238fe10b548a94cb6867a], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [37a1c9ffc1bae1551157262643c16d93], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [d20607c1bfbc69cd75f47cd0fc087a86], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT, In Quarantäne, [3b9d765257240432245a0fe09b67be42], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, In Quarantäne, [4e8a3d8b2358f046d0f828bac63cdd23], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [34a4f1d70378d85eb349a73b639f0bf5], 
PUP.Optional.SupraSavings.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SupraSavingsService64, In Quarantäne, [ffd99038aad19b9bee08a1a7c440f40c], 
PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD, In Quarantäne, [f8e0face4f2ce4523e7cdb0d7b87bb45], 
PUP.Optional.CouponDownloader.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Coupon Downloader, In Quarantäne, [f9dfbc0ca7d4a78fd8eb2ecead55a858], 
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.3, In Quarantäne, [f3e55672ee8d3204e0cfe40f0cf65aa6], 
PUP.Optional.SupraSavings.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, In Quarantäne, [cc0c22a68fecad89f71038cc0ff4ed13], 
PUP.Optional.ViewPassword.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ViewPassword, In Quarantäne, [67718d3b6219ae886a39d91757ab916f], 
PUP.Optional.FreeSoftToday.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\freesofttoday, In Quarantäne, [5a7eb8107308da5c3b075cef32d250b0], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, In Quarantäne, [f6e2ecdc72099e98514ce26a37cd27d9], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [498f7f49631874c286e798a5ab59a25e], 
PUP.Optional.PlusHD.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.3, In Quarantäne, [ffd99a2e255654e2743b0fe4c042916f], 
PUP.Optional.SupraSavings.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, In Quarantäne, [07d101c70e6d1b1bb651e51f41c2f709], 
PUP.Optional.ViewPassword.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ViewPassword, In Quarantäne, [d503e9df85f65adc1c874ca448ba2bd5], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, In Quarantäne, [993fad1b6f0cdd5931b6ae6423e0e917], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, In Quarantäne, [76625573314a96a036e407222ed6c43c], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, In Quarantäne, [657314b4651662d4cdb84b9abf43768a], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\PlusHDv1.3, In Quarantäne, [eeeab90f403bed49ae78a73ced15b050], 
PUP.Optional.Ciuvo.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, In Quarantäne, [b22691377dfe0c2a76c211dee9198e72], 
PUP.Optional.SuperFish.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, In Quarantäne, [3b9d5f6932493afc44f3faf5c0427b85], 
PUP.Optional.Qone8, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [7d5bf5d30b704beb5b66a78db84c4eb2], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544834460}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555835560}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566836660}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555835560}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566836660}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544834460}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522832260}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220522832260}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511831160}\INPROCSERVER32, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511831160}, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HD-V1.3, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 

Registrierungswerte: 11
PUP.Optional.Iminent.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [72667454017a90a62fcee7c0f0128d73], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [88504b7dbfbcd85ea954fcabd13116ea], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [c90f18b04b30d6603e229952e61cd22e]
PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|fst_de_46, In Quarantäne, [8b4d963294e7a78f693de31cb54de31d], 
PUP.Optional.FirstSeenToday.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|fst_de_48, In Quarantäne, [4593bc0ca5d61d19970fcc333fc318e8], 
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT|InstallDir, C:\PROGRA~2\SearchProtect, In Quarantäne, [3b9d765257240432245a0fe09b67be42]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, In Quarantäne, [4e8a3d8b2358f046d0f828bac63cdd23]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tt4u, In Quarantäne, [34a4f1d70378d85eb349a73b639f0bf5]
PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD|ImagePath, \??\C:\Windows\system32\drivers\SPPD.sys, In Quarantäne, [f8e0face4f2ce4523e7cdb0d7b87bb45]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 1V2X1Q1R1M1F, In Quarantäne, [76625573314a96a036e407222ed6c43c]
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PriceMeterW, "C:\Users\Nathalie94\AppData\Local\PriceMeter\pricemeterw.exe", In Quarantäne, [96420fb9b9c252e489176d8a5fa35aa6]

Registrierungsdaten: 16
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC64~1.DLL, Gut: (), Schlecht: (C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC64~1.DLL),Ersetzt,[657315b39be0ad8911302d6b2fd2639d]
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL, Gut: (), Schlecht: (C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\SPVC32~1.DLL),Ersetzt,[e4f43395e893ec4a4ef3900856abbf41]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[5e7a77519ae1d95d3cb6b01e0afaa957]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[b325794f7605b383f7fdf9d515ef837d]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[518725a34f2c38fed1221db1bb49ae52]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[538528a02a51a6906a8b9b33d0348d73]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[defa23a56f0c90a6b345636b5ba94cb4]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[b4246068b5c60432c0dfb722a65e0df3]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[32a6c602710ad066ba3805c9c3417090]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[6a6ed1f799e24fe7c430a628689c09f7]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[25b37a4e90ebeb4b01f21fafa95b7789]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[e6f2eeda512af14542b3e4ea867ee51b]
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ&q={searchTerms}),Ersetzt,[b7212a9eb0cbab8b23d5a925d03454ac]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[a830f7d12853ab8bc8d7eced986cf20e]
PUP.Optional.Trovi.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=55&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&SSPV=, Gut: (www.google.com), Schlecht: (hxxp://www.trovi.com/?gd=&ctid=CT3320325&octid=EB_ORIGINAL_CTID&ISID=M905E22E7-334F-4AC1-9489-54EE21F0A36A&SearchSource=55&CUI=&UM=6&UP=SPD2F33FED-0CB9-4813-BDF8-9D6C71F36F7B&SSPV=),Ersetzt,[d305f6d27308171f59876866b54f6997]
PUP.Optional.ISearch.A, HKU\S-1-5-21-573978712-1729818946-958835018-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ, Gut: (www.google.com), Schlecht: (hxxp://isearch.omiga-plus.com/?type=hp&ts=1403207037&from=tt4u&uid=ST500LM000-1EJ162_W372W9WQXXXXW372W9WQ),Ersetzt,[dcfc794f8bf04aeceee516b85ca8b24e]

Ordner: 108
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\rep, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin, Löschen bei Neustart, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\rep, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.Iminent.A, C:\Users\Nathalie94\AppData\Local\Temp\Iminent, In Quarantäne, [7266c40485f6b97da7eb2299e71b7c84], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\defaults, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\defaults\preferences, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\userCode, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\locale, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\locale\en-US, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.PriceMeter.A, C:\Users\Nathalie94\AppData\Local\PriceMeter, In Quarantäne, [9a3e56725d1eba7caaab14aedf2357a9], 
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings, In Quarantäne, [c5135b6d235848ee12e6635fb44e37c9], 
PUP.Optional.SupraSavings.A, C:\Program Files\SupraSavings\SSL, In Quarantäne, [c5135b6d235848ee12e6635fb44e37c9], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, In Quarantäne, [e4f476522b5042f49da4a03129d95ba5], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [e4f476522b5042f49da4a03129d95ba5], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect, Löschen bei Neustart, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect, Löschen bei Neustart, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\STG, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\UI, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\UI\rep, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\userCode, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\actions, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\popupResource, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\databases\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0, Löschen bei Neustart, [6d6bcafef08bc86e5ded448df60c09f7], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\log, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\update, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Managera.A, C:\Users\Nathalie94\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42, In Quarantäne, [9d3b0dbb601b4aecb2f3c310828043bd], 
PUP.Optional.SystemSpeedup, C:\Users\Nathalie94\AppData\Roaming\systweak\ssd, In Quarantäne, [edeb6f593b4040f6055103d138ca6a96], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{522A9285-0F80-4D42-BC73-5A5CAAB3F16D}, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Users\Nathalie94\AppData\Roaming\SupTab, In Quarantäne, [a434c008106be94d4b88a3369a68d828], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\defaults, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\defaults\preferences, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\userCode, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\locale, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\locale\en-US, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 

Dateien: 579
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe, Löschen bei Neustart, [c4145e6a86f5d06649f808905ca5817f], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe, Löschen bei Neustart, [83554f793f3c8caa85bc2d6b21e0cf31], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe, Löschen bei Neustart, [b721a523b6c5d4627fc225732bd6ed13], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll, Löschen bei Neustart, [54846f59bfbc6bcbb78a3a5e2dd4ef11], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll, In Quarantäne, [657315b39be0ad8911302d6b2fd2639d], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll, In Quarantäne, [e4f43395e893ec4a4ef3900856abbf41], 
PUP.Optional.AdPeak.A, C:\temp\InstallFilter64.msi, In Quarantäne, [c1173494423939fd30712c113fc1ac54], 
PUP.Optional.SupraSavings.A, C:\temp\t.msi, In Quarantäne, [5b7d1cacfa8170c69641d6e364a08e72], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsbC477.exe, In Quarantäne, [c117a02880fb122459c17d11c53c56aa], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsgA740.exe, In Quarantäne, [14c47a4e5c1f60d6fa20f9955fa2a65a], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nskCD71.exe, In Quarantäne, [b2264a7eee8dff37e832eca2d031ae52], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsm1B38.exe, In Quarantäne, [4a8e07c1d9a2a88ef02a8e006c95817f], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsm2AE9.exe, In Quarantäne, [f5e3deea83f89f9721f92569b64bad53], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsoADC9.exe, In Quarantäne, [3a9e0abea4d74ee81bff513dd62b49b7], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nssD580.exe, In Quarantäne, [597f34940675b680d842f6985ba6639d], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nssEA59.exe, In Quarantäne, [dcfc38900d6e55e1da40f5990ff2b947], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsx20E5.exe, In Quarantäne, [03d5e7e1fd7e8bab0812543abf425fa1], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\Temp\nsz81A0.tmp, In Quarantäne, [30a866623942d066251cd7c1c8393bc5], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\Temp\SPSetup.exe, In Quarantäne, [10c834946d0e41f5d071316717ea45bb], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsaE42E.exe, In Quarantäne, [cf09d6f2c8b3290de436226cfb0613ed], 
PUP.Optional.Conduit.A, C:\Users\Nathalie94\AppData\Local\Temp\nsa3402.exe, In Quarantäne, [894fb8103b403303fc1e741ade23d52b], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\Temp\nsoF0DF\SpSetup.exe, In Quarantäne, [cc0cb3156219b284a39e465217ead42c], 
PUP.Optional.GenericExt.A, C:\Users\Nathalie94\AppData\Local\Temp\igdhbblpcellaljokkpfhcjlagemhgjl6263\minibarchrome.exe, In Quarantäne, [b72160684536181ea2c1a19c837d7789], 
PUP.Optional.BundleInstaller.A, C:\Users\Nathalie94\AppData\Local\Temp\n1797\s1797.exe, In Quarantäne, [726613b56e0dad89d6e34106ed1345bb], 
PUP.Optional.FreeSoftToday.A, C:\Users\Nathalie94\AppData\Local\Temp\n2679\fst_de_1806-c280804b.exe, In Quarantäne, [a038a6226b10ea4c3492a4ef4eb3f60a], 
PUP.Optional.Iminent.A, C:\Users\Nathalie94\AppData\Local\Temp\n2679\Iminent_1712-b2fcad5e.exe, In Quarantäne, [17c1379164179d99b9267ad58f727090], 
PUP.Optional.BundleInstaller.A, C:\Users\Nathalie94\AppData\Local\Temp\n2679\s2679.exe, In Quarantäne, [d8004583fc7f201607b23f08ae52629e], 
PUP.Optional.Babylon, C:\Users\Nathalie94\AppData\Local\Temp\n2679\systemspeedup_1203-72c8223c.exe, In Quarantäne, [63753593d0ab95a1eff3961817ea42be], 
PUP.Optional.SupraSavings, C:\Windows\Temp\6DAF2CD5-832E-48EB-8678-2B122163A2D9n.exe, In Quarantäne, [00d8e4e43249c076b1dd74531fe512ee], 
PUP.Optional.Conduit.A, C:\Windows\Temp\nsfC400.exe, In Quarantäne, [479121a7accf3ff726f4503eb150bb45], 
PUP.Optional.Conduit.A, C:\Windows\Temp\nsrA183.exe, In Quarantäne, [86522d9b85f638fe36e4fc9213ee26da], 
PUP.Optional.Breitschopp, C:\Users\Nathalie94\Downloads\DLG_chrome_browser_de-DE.exe, In Quarantäne, [18c074542259f244c85de4d46e96e21e], 
PUP.Optional.BundleInstaller.A, C:\Users\Nathalie94\Downloads\flashplayerpro-setup.exe, In Quarantäne, [a2362e9a87f4da5c41203b0d936d27d9], 
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\SPVCLdr64.dll, In Quarantäne, [f3e54c7cc7b4f541a39e6d2b867b8f71], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1, In Quarantäne, [1bbd5276e992a2941a4136b5f01237c9], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11, In Quarantäne, [a6321cac5f1c7fb760fb06e545bdcd33], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2, In Quarantäne, [b028ecdcc5b6251182d9b2398d75bf41], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3, In Quarantäne, [5a7ecbfdd5a625110e4db8338c7658a8], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4, In Quarantäne, [f0e823a57ffcf24471eab2398979ed13], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5, In Quarantäne, [c216d7f1daa1cd699ac1feed13efaf51], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6, In Quarantäne, [32a64e7a6615e6503c1fe209b84a748c], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7, In Quarantäne, [7167a4240576b383e972c625bf43b050], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0.localstorage, Löschen bei Neustart, [aa2e329656256bcbd9dc1ad8f1116e92], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0.localstorage-journal, In Quarantäne, [98401aae552622141e97b33fb74b01ff], 
PUP.Optional.Ciuvo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_api.ciuvo.com_0.localstorage, In Quarantäne, [25b3646409720f27faf652a15ba77b85], 
PUP.Optional.Ciuvo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_api.ciuvo.com_0.localstorage-journal, In Quarantäne, [b622b414abd050e6816f8c6724debf41], 
PUP.Optional.BetterDeals.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, Löschen bei Neustart, [c3151aae43383501bef240b54bb7af51], 
PUP.Optional.BetterDeals.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, Löschen bei Neustart, [7f59418790ebe353a60ad52041c157a9], 
PUP.Optional.SelectNGo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, Löschen bei Neustart, [894fa523542778bee3b4ba3da959f40c], 
PUP.Optional.SelectNGo.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, Löschen bei Neustart, [fbdd2a9e1d5e5ed815826f88f012f20e], 
PUP.Optional.LiveLyrics.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage, In Quarantäne, [ca0e9137eb9071c56a7d8870d52dc739], 
PUP.Optional.LiveLyrics.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage-journal, In Quarantäne, [c414a52380fb1c1a3ea939bfd0326d93], 
PUP.Optional.Trovi.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\searchplugins\trovi-search.xml, In Quarantäne, [d0088b3dd4a7999d9e49b8427e84c13f], 
PUP.Optional.Superfish.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_www.superfish.com_0.localstorage, Löschen bei Neustart, [af2933950972a591806a52a8659d26da], 
PUP.Optional.Superfish.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_www.superfish.com_0.localstorage-journal, In Quarantäne, [c612b90f57241c1ac9213ebcc43ebf41], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\EULA.txt, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js, In Quarantäne, [60780fb9e49757df1d10c0731aea26da], 
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{af16abf4-eac1-49b4-93fc-58f6ca799135}w64.sys, In Quarantäne, [f6e25d6b3a414ee863984cfcce3638c8], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-1.job, In Quarantäne, [cc0c0fb9fc7ff64015c861e8f4100af6], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-11.job, In Quarantäne, [f9df3d8b2d4eb185edf0fc4dc53fd729], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-2.job, In Quarantäne, [5484af193d3ec175b22b6ddc48bcaa56], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-3.job, In Quarantäne, [24b4f0d8116a8ea8dd00262342c206fa], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-4.job, In Quarantäne, [8b4d3593b8c3e650716c0445e51fd32d], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-5.job, In Quarantäne, [637503c57ffcbb7b706d5fea7c889f61], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-6.job, In Quarantäne, [b3257652710ac0766b725ced689ca45c], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2506299e-ff02-4ad9-8fb7-2839503e854f-7.job, In Quarantäne, [7c5cbf0991ea83b39b42c6833ec6e11f], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [51875a6ee9928fa7b43f80c94fb527d9], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [8256bb0d7ffc1c1ac62e71d8e024be42], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [9b3dad1bc8b353e3af463a0f51b35ea2], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [56823494f784eb4b80764dfc8d7749b7], 
PUP.Optional.SupraSavings.A, C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\SupraSavingsService64.exe, Löschen bei Neustart, [ffd99038aad19b9bee08a1a7c440f40c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome.manifest, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\install.rdf, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\2174a48913367074082d9b8c133a2661.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\69f2385f3545d6a4fdf733c53addf489.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\77fd6878acbf00a401e2b68bad6f9661.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\7c71cb1bcaadb8f5d4fa3851233b8b0d.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\background.html, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\browser.xul, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\c8f4d46f47f8c638b16fb0a4060803b6.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\dialog.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\options.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\options.xul, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\search_dialog.xul, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\a793669c44ef0bb705f7adac5b8aa826.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\0d06ba473f35e996609e935942094851.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\151be1836ef23dd27822437b7de1d588.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\1548f0ffb18af4ab4ce3c00be1092530.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\3d10bf46fff9e997b44096d7d3855069.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\62f48137a80b396b4e91be953e09ace5.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\74d5d296a02e9152902513b5a6bfcfbd.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\806b5d5309537e25d913cd14132d7535.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\93d1ea88141db1b65de05aa05409a75f.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\ba28358b7811a78203a46ebf7fa1e506.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\c9c1ff00a91082fd6f21116c8314f73a.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\cf065bbd98da35640a111ae42f2ee2f7.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\db98e7b3d4339295f99858d49f395eee.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\e515d695195d02a13b353ccb71ecadcb.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\e75edfedc58c113efc4f9d88eaf20206.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\api\f785d646b6e59274907be69a63a198cf.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\012b8dea5b7fccbf7e2cd3bbca35a9bf.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\10d1cf15490f5b08e8a58a795eecd10e.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\2d63dc955bf46e18d00e833e9bdf2090.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\3330e469c36ad1ed713e63daed021cc5.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\44e0da83e462830524ea27ff412d78bc.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\4ec2a02e285814495d99ec86efa76389.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\509d211a5abca65efb654a01fbf5fd57.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\602a3de27efbc918f2da5cf96199d4c6.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\60f7195ad3ce16f8ac071123f87fa38b.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\7579a2dd8a8945376df1b97ca76399b1.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\7febf301d5773fdc5469638f84e3b123.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\88e2d6dca834df6a256dcdca58c5f283.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\995ee845a7fd79f49fc4c27d8cb48d85.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\9db3b10370a134bc836212ea9bceebe5.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\a032c0e12c234e15f1006f4089df24bf.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\c5470289a0757eb481d66d0d3038e355.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\cd9d66f13871ed215499beb49f00c809.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\d4e8ec766b0a932ce08726f22bc39bca.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\f4421750bc1883f2db568f4b216b70f1.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\fe0163851606ec21b2406d5ed7f4ae2f.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\chrome\content\core\installer.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\defaults\preferences\prefs.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\manifest.xml, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins.json, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\220.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\1.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\102.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\104.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A,

Nathalie · 21.08.2014, 19:54

MBAM Teil 2

Code:

ATTFilter

C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\119.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\123.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\13.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\14.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\155.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\16.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\17.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\177.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\178.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\179.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\180.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\182.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\183.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\184.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\191.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\195.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\207.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\21.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\22.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\221.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\223.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\231.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\232.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\242.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\244.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\246.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\257.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\260.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\262.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\263.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\265.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\268.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\273.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\28.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\281.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\4.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\47.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\64.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\7.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\72.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\78.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\9.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\91.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\93.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\98.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\userCode\background.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\userCode\extension.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\locale\en-US\translations.dtd, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button1.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button2.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button3.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button4.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button5.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\crossrider_statusbar.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon128.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon16.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon24.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon48.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\panelarrow-up.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\popup.html, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\skin.css, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\update.css, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\58360.xpi, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\1293297481.mxaddon, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-11.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-2.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-3.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-4.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-5.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f.crx, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\360-58360.crx, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\58360.crx, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\background.html, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\bgNova.html, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-bg.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-bho.dll, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-bho64.dll, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-codedownloader.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.dll, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-novainstaller.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3.ico, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\Uninstall.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\utils.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [e4f476522b5042f49da4a03129d95ba5], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep\Cvc.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\background.html, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\chromeCoreFilesIndex.txt, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\crossriderManifest.json, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\manifest.json, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\popup.html, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\manifest.xml, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins.json, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\223.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\1.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\102.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\104.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\119.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\123.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\13.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\14.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\155.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\17.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\177.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\178.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\179.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\180.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\182.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\183.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\184.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\19.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\191.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\195.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\207.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\21.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\22.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\220.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\221.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\231.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\232.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\242.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\244.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\246.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\257.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\260.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\262.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\263.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\265.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\267.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\273.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\28.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\4.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\47.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\64.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\7.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\72.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\78.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\80.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\9.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\91.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\93.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\97.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\userCode\background.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\userCode\extension.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\icon128.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\icon16.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\icon48.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\actions\1.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\background.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\main.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\platformVersion.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\chrome.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\cookie.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\message.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\monitor.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\pageAction.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\pageActionBG.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\app_api.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\bg_app_api.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\consts.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\cookie_store.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\crossriderAPI.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\delegate.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\events.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\extensionDataStore.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\installer.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\logFile.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\logging.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\onBGDocumentLoad.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\reports.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\storageWrapper.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\updateManager.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\util.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\xhr.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\popupResource\newPopup.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\popupResource\popup.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000053.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000067.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000073.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000076.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000083.log, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\CURRENT, In Quarantäne, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\LOCK, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\LOG, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\LOG.old, In Quarantäne, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\MANIFEST-000081, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\databases\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0\2, In Quarantäne, [6d6bcafef08bc86e5ded448df60c09f7], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\log\wprotectmanager_2014-06-19[21-44-26-494].log, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\update\conf, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\bk.js, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\cs.js, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\manifest.json, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Managera.A, C:\Users\Nathalie94\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\cs.js, In Quarantäne, [9d3b0dbb601b4aecb2f3c310828043bd], 
PUP.Optional.Managera.A, C:\Users\Nathalie94\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\manifest.json, In Quarantäne, [9d3b0dbb601b4aecb2f3c310828043bd], 
PUP.Optional.SystemSpeedup, C:\Users\Nathalie94\AppData\Roaming\systweak\ssd\SSDPTstub.exe, In Quarantäne, [edeb6f593b4040f6055103d138ca6a96], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleCrashHandler.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdate.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdateBroker.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdateHelper.msi, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdateOnDemand.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\goopdate.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\goopdateres_en.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\npGoogleUpdate4.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\psmachine.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\psuser.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome.manifest, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\install.rdf, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\15597354148702fcef330d7532d11c3f.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\22e7fa1b054004d783dcc31c77568157.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\2df186fff2ded5b05192cccd7d7d3268.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\46fcb893f1d8ff40b3c12cbb435c9812.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\5131f99d09dee933d3cb0bf8feaa5b00.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\background.html, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\browser.xul, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\d29220f680ef5ca769e82bc9a8774808.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\dialog.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\options.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\options.xul, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\search_dialog.xul, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\92dd832ea513316baebfedb6fcb33811.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\4bd8fecbec0742472cfca2f686d8be02.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\4f62cfd7972753285fdeb1c0010aa158.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\61e31cf6d75f023903a40a68ef8e0b21.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\63f287d782e34f8f3c9810ed50be6ff1.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\7273716c2d13dd860b6c44595ef46ad5.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\72989648d17dec438082e493156b91b6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\7ccf1ea3a25642c12f440820a2a40511.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\928467a0b9c622ae4c1ba6b6e1c76ea6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\962702114063e7c97bf13ca7ff46e044.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\9dbe9cc48e8e155517aa9a6a1f142812.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\aef179f7f4f72527125085f054f7eb63.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\b98f22a7850fd5533a76f25417256557.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\c47b60bea4837417cbf2106fb1d68073.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\d1139cad85c9a848254c261a7a9068c6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\d7e95ed4a28425e4a77e67e819ff3e27.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\b9fab8dbe040318cc58edac95b5990ba.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\09053517b65cb10809925ae675e5fda9.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\0b814418b3adf785b3a1d99badba5e93.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\128fc65cbb7dffec4eef1ea7b0ef7e98.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\34c74fe115cbe2323443b55b34de0fe5.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\3c40b93c583a13cba7856dae4f54f233.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\46a5453557f4ed3f950f38e6d0086239.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\4d5a2fb152c4b260ae127f1224ee0c90.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\62e709578cdf8315ffa6fc64e26ae12b.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\676486091180186d1ca5cb2390e08d85.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\8c06156a04567155e8fbb3431620bed8.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\8e64c9255839c71e0a46854366f269b6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\a2fcf5693ca53ac37a3606d8081ea00a.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\ad0fd4879085132bf00a06d561e06e55.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\bc5830190da07fd677b287292bb38395.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\bd76cc85729561112fc16710398f4d4f.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\c123687b41bc8d0349bcbffadfda29e0.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\cdf432a5217757f037ff782a1549131d.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\e62a48af28aefd892fc562a2f4c65b8a.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\fa12c097c616359268a91d16ccb1493c.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\installer.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\defaults\preferences\prefs.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\manifest.xml, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins.json, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\223.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\1.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\102.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\104.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\119.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\123.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\13.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\14.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\155.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\16.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\17.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\177.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\178.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\179.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\180.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\182.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\183.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\184.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\191.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\195.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\198.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\207.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\21.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\217.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\22.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\220.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\221.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\231.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\232.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\246.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\259.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\262.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\263.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\268.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\273.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\28.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\281.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\289.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\4.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\47.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\64.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\7.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\72.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\78.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\9.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\91.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\98.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\userCode\background.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\userCode\extension.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\locale\en-US\translations.dtd, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button1.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button2.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button3.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button4.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button5.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\crossrider_statusbar.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon128.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon16.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon24.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon48.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\panelarrow-up.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\popup.html, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\skin.css, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\update.css, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 

Physische Sektoren: 0
(No malicious items detected)


(end)[

Nathalie · 21.08.2014, 19:55

MBAM Teil 2

Code:

ATTFilter

C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\119.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\123.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\13.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\14.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\155.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\16.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\17.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\177.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\178.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\179.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\180.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\182.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\183.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\184.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\191.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\195.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\207.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\21.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\22.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\221.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\223.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\231.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\232.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\242.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\244.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\246.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\257.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\260.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\262.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\263.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\265.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\268.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\273.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\28.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\281.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\4.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\47.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\64.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\7.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\72.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\78.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\9.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\91.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\93.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\plugins\98.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\userCode\background.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\extensionData\userCode\extension.js, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\locale\en-US\translations.dtd, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button1.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button2.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button3.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button4.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\button5.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\crossrider_statusbar.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon128.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon16.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon24.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\icon48.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\panelarrow-up.png, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\popup.html, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\skin.css, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\ba9147e3-ae8c-4ced-9c9a-240425bd7d8e@6ddffb66-c974-42d7-8752-9e6a4ec073b0.com\skin\update.css, In Quarantäne, [0fc9596f2b50ed49a15c5c6406fc669a], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\58360.xpi, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\1293297481.mxaddon, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-11.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-2.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-3.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-4.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f-5.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\2506299e-ff02-4ad9-8fb7-2839503e854f.crx, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\360-58360.crx, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\58360.crx, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\background.html, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\bgNova.html, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-bg.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-bho.dll, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-bho64.dll, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-codedownloader.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.dll, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-nova.exe, Löschen bei Neustart, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3-novainstaller.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\HD-V1.3.ico, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\Uninstall.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.3\utils.exe, In Quarantäne, [a335824681fa89ad388b6d63d9290cf4], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [e4f476522b5042f49da4a03129d95ba5], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep\Cvc.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.SearchProtect.A, C:\Users\Nathalie94\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, In Quarantäne, [7e5a10b8a8d303339aa89d34dd251ce4], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\background.html, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\chromeCoreFilesIndex.txt, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\crossriderManifest.json, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\manifest.json, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\popup.html, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\manifest.xml, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins.json, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\223.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\1.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\102.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\104.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\119.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\123.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\13.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\14.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\155.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\17.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\177.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\178.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\179.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\180.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\182.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\183.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\184.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\19.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\191.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\195.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\207.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\21.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\22.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\220.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\221.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\231.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\232.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\242.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\244.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\246.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\257.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\260.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\262.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\263.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\265.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\267.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\273.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\28.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\4.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\47.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\64.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\7.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\72.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\78.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\80.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\9.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\91.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\93.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\plugins\97.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\userCode\background.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\extensionData\userCode\extension.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\icon128.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\icon16.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\icon48.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\icons\actions\1.png, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\background.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\main.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\platformVersion.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\chrome.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\cookie.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\message.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\monitor.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\pageAction.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\api\pageActionBG.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\app_api.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\bg_app_api.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\consts.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\cookie_store.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\crossriderAPI.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\delegate.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\events.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\extensionDataStore.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\installer.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\logFile.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\logging.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\onBGDocumentLoad.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\reports.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\storageWrapper.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\updateManager.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\util.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\xhr.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\popupResource\newPopup.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\extensions\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\1.26.20_0\js\lib\popupResource\popup.js, In Quarantäne, [993fc008027987af0147e5eccd35d42c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000053.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000067.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000073.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000076.ldb, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\000083.log, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\CURRENT, In Quarantäne, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\LOCK, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\LOG, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\LOG.old, In Quarantäne, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\Local Extension Settings\ofjpieepnfhpcpkjklohnpmmmmdhcbmd\MANIFEST-000081, Löschen bei Neustart, [7860b018fe7d3cfa1e2b9f32986ac43c], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\default\databases\chrome-extension_ofjpieepnfhpcpkjklohnpmmmmdhcbmd_0\2, In Quarantäne, [6d6bcafef08bc86e5ded448df60c09f7], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\log\wprotectmanager_2014-06-19[21-44-26-494].log, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsProtectManger\update\conf, In Quarantäne, [bd1bf1d789f247ef33b58f42ee14a35d], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\bk.js, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\cs.js, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Extutil.A, C:\Users\Nathalie94\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\manifest.json, In Quarantäne, [46923494dd9ec0769a0a4c877d85cb35], 
PUP.Optional.Managera.A, C:\Users\Nathalie94\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\cs.js, In Quarantäne, [9d3b0dbb601b4aecb2f3c310828043bd], 
PUP.Optional.Managera.A, C:\Users\Nathalie94\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\manifest.json, In Quarantäne, [9d3b0dbb601b4aecb2f3c310828043bd], 
PUP.Optional.SystemSpeedup, C:\Users\Nathalie94\AppData\Roaming\systweak\ssd\SSDPTstub.exe, In Quarantäne, [edeb6f593b4040f6055103d138ca6a96], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, In Quarantäne, [35a39830b4c723137319369f2fd3b14f], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleCrashHandler.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdate.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdateBroker.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdateHelper.msi, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\GoogleUpdateOnDemand.exe, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\goopdate.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\goopdateres_en.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\npGoogleUpdate4.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\psmachine.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.GlobalUpdate.A, C:\Users\Nathalie94\AppData\Local\Temp\comh.369539\psuser.dll, In Quarantäne, [5a7e0ebab8c3fd399b0d12c3d42e4ab6], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [94442f99dd9e5ed81ab827b2b74b43bd], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome.manifest, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\install.rdf, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\15597354148702fcef330d7532d11c3f.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\22e7fa1b054004d783dcc31c77568157.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\2df186fff2ded5b05192cccd7d7d3268.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\46fcb893f1d8ff40b3c12cbb435c9812.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\5131f99d09dee933d3cb0bf8feaa5b00.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\background.html, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\browser.xul, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\d29220f680ef5ca769e82bc9a8774808.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\dialog.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\options.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\options.xul, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\search_dialog.xul, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\92dd832ea513316baebfedb6fcb33811.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\4bd8fecbec0742472cfca2f686d8be02.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\4f62cfd7972753285fdeb1c0010aa158.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\61e31cf6d75f023903a40a68ef8e0b21.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\63f287d782e34f8f3c9810ed50be6ff1.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\7273716c2d13dd860b6c44595ef46ad5.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\72989648d17dec438082e493156b91b6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\7ccf1ea3a25642c12f440820a2a40511.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\928467a0b9c622ae4c1ba6b6e1c76ea6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\962702114063e7c97bf13ca7ff46e044.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\9dbe9cc48e8e155517aa9a6a1f142812.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\aef179f7f4f72527125085f054f7eb63.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\b98f22a7850fd5533a76f25417256557.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\c47b60bea4837417cbf2106fb1d68073.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\d1139cad85c9a848254c261a7a9068c6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\api\d7e95ed4a28425e4a77e67e819ff3e27.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\b9fab8dbe040318cc58edac95b5990ba.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\09053517b65cb10809925ae675e5fda9.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\0b814418b3adf785b3a1d99badba5e93.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\128fc65cbb7dffec4eef1ea7b0ef7e98.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\34c74fe115cbe2323443b55b34de0fe5.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\3c40b93c583a13cba7856dae4f54f233.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\46a5453557f4ed3f950f38e6d0086239.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\4d5a2fb152c4b260ae127f1224ee0c90.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\62e709578cdf8315ffa6fc64e26ae12b.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\676486091180186d1ca5cb2390e08d85.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\8c06156a04567155e8fbb3431620bed8.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\8e64c9255839c71e0a46854366f269b6.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\a2fcf5693ca53ac37a3606d8081ea00a.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\ad0fd4879085132bf00a06d561e06e55.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\bc5830190da07fd677b287292bb38395.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\bd76cc85729561112fc16710398f4d4f.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\c123687b41bc8d0349bcbffadfda29e0.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\cdf432a5217757f037ff782a1549131d.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\e62a48af28aefd892fc562a2f4c65b8a.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\fa12c097c616359268a91d16ccb1493c.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\chrome\content\core\installer.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\defaults\preferences\prefs.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\manifest.xml, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins.json, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\223.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\1.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\102.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\104.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\119.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\123.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\13.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\14.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\155.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\16.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\17.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\177.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\178.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\179.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\180.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\182.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\183.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\184.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\191.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\195.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\198.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\207.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\21.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\217.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\22.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\220.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\221.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\231.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\232.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\246.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\259.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\262.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\263.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\268.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\273.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\28.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\281.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\289.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\4.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\47.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\64.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\7.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\72.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\78.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\9.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\91.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\plugins\98.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\userCode\background.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\extensionData\userCode\extension.js, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\locale\en-US\translations.dtd, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button1.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button2.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button3.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button4.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\button5.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\crossrider_statusbar.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon128.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon16.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon24.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\icon48.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\panelarrow-up.png, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\popup.html, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\skin.css, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 
PUP.Optional.CrossRider.A, C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\extensions\FHJA85460364@KO32904357.com\skin\update.css, In Quarantäne, [bc1cd4f41c5fb6809e05f7e5986a22de], 

Physische Sektoren: 0
(No malicious items detected)


(end)[

Nathalie · 21.08.2014, 19:58

Junkware Removal Tool Logfiles:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Nathalie94 on 21.08.2014 at 19:58:41,98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Nathalie94\AppData\Roaming\mozilla\firefox\profiles\4mmsfwzm.default\extensions\staged
Emptied folder: C:\Users\Nathalie94\AppData\Roaming\mozilla\firefox\profiles\4mmsfwzm.default\minidumps [1 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.08.2014 at 20:10:35,80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Neue FRST Logfiles:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-08-2014 01
Ran by Nathalie94 (administrator) on NATHALIE on 21-08-2014 20:11:54
Running from C:\Users\Nathalie94\Desktop\Trojaner Board
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\Atouch64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\PHotkey\GPMTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-09-29] (Realtek Semiconductor Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2777840 2013-08-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [137352 2014-05-30] (Check Point Software Technologies Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKCU - {353B757B-964B-46F1-BD00-A29ED1E1FB89} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=HFA5&Lan=DE&q={searchTerms}&gu=47155c9848d44533acbc2fad088f39b8&tu=10G9z00EZ1D20F0&sku=&tstsId=&ver=&&r=734
SearchScopes: HKCU - {5FFB80D7-DCDE-47F9-B4DC-35AA191E88FE} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_secureddownload_14_24_ch&cd=2XzuyEtN2Y1L1QzuyDyEtByBtC0EyD0AzytC0CyBtCzztDzztN0D0Tzu0SzzzyyBtN1L2XzutBtFtBtCtFyEtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StB0BzytDzyyCtBzztG0CtCtD0FtGtC0Dzz0CtGzy0A0AtBtGyCzztCyBtCyCyCyC0ByCyBtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0CyCzzzz0AtCtCtG0C0BzyyBtG0AtC0C0CtGtCyBzzyEtGtDtAyCyB0EtBtA0FyCyByCtD2Q&cr=1626871350&ir=
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]
CHR Extension: (Google Drive) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]
CHR Extension: (YouTube) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]
CHR Extension: (Adblock Plus) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-31]
CHR Extension: (Google-Suche) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]
CHR Extension: (ZoneAlarm Chrome Toolbar) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgdcapepedmpopjkmdbjnmmmfgllnfek [2014-07-31]
CHR Extension: (Google Wallet) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
CHR Extension: (Google Mail) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]
CHR HKCU\...\Chrome\Extension: [kgdcapepedmpopjkmdbjnmmmfgllnfek] - C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarm.crx [2014-02-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [61440 2013-09-26] () [File not signed]
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-22] (IObit)
R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3592120 2014-05-30] (Check Point Software Technologies Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [90936 2014-05-29] (Check Point Software Technologies, Ltd.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2014-04-30] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2014-04-30] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-04-30] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [490080 2014-04-30] (Kaspersky Lab ZAO)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [548056 2013-09-05] (Realtek Semiconductor Corporation)
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [2968280 2014-01-15] (Realtek Semiconductor Corporation                           )
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2945240 2013-09-12] (Realtek Semiconductor Corporation                           )
S3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [450968 2014-05-30] (Check Point Software Technologies Ltd.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 20:10 - 2014-08-21 20:10 - 00000883 _____ () C:\Users\Nathalie94\Desktop\JRT.txt
2014-08-21 19:58 - 2014-08-21 19:58 - 00000000 ____D () C:\Windows\ERUNT
2014-08-21 19:54 - 2014-08-21 19:54 - 00011519 _____ () C:\Users\Nathalie94\Desktop\AdwCleaner[S0].txt
2014-08-21 19:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-21 11:37 - 2014-08-21 19:51 - 00000000 ____D () C:\AdwCleaner
2014-08-20 23:46 - 2014-08-20 23:46 - 01016261 _____ (Thisisu) C:\Users\Nathalie94\Downloads\JRT.exe
2014-08-20 23:45 - 2014-08-20 23:45 - 01361671 _____ () C:\Users\Nathalie94\Downloads\adwcleaner_3.307.exe
2014-08-20 23:38 - 2014-08-20 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 23:37 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-20 23:37 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-20 23:35 - 2014-08-20 23:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nathalie94\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 23:26 - 2014-08-20 23:26 - 00000902 _____ () C:\Users\Nathalie94\Desktop\Revo Uninstaller.lnk
2014-08-20 23:24 - 2014-08-20 23:24 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nathalie94\Downloads\revosetup95.exe
2014-08-20 23:08 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-08-20 23:08 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-08-20 23:08 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-08-20 23:08 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-08-20 23:08 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-08-20 23:08 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-08-20 23:08 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2014-08-20 23:08 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll
2014-08-20 23:08 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2014-08-20 23:08 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2014-08-20 23:08 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncobjapi.dll
2014-08-20 23:08 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll
2014-08-20 23:08 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll
2014-08-20 23:08 - 2014-05-03 01:26 - 00050745 _____ () C:\Windows\system32\srms.dat
2014-08-20 23:08 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-08-20 23:08 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys
2014-08-20 23:08 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-08-20 23:08 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-08-20 23:08 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
2014-08-20 23:08 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe
2014-08-20 23:08 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
2014-08-20 23:08 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-08-20 23:08 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-08-20 23:08 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-08-20 23:08 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2014-08-20 23:08 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-08-20 23:08 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-08-20 23:08 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2014-08-20 23:08 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-08-20 23:08 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-08-20 23:08 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2014-08-20 23:08 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-08-20 23:08 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-08-20 23:08 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-08-20 23:08 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-08-20 23:08 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2014-08-20 23:08 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-08-20 23:08 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-08-20 23:08 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-08-20 23:08 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-08-20 23:08 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-08-20 23:04 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-08-20 23:04 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-08-20 23:04 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-08-20 23:04 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-08-20 23:04 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-08-20 23:04 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-08-19 21:17 - 2014-08-21 20:11 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Trojaner Board
2014-08-19 19:42 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-08-19 14:34 - 2014-08-21 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-08-19 14:34 - 2014-08-20 23:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-19 14:34 - 2014-08-20 23:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-19 14:33 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-19 14:10 - 2014-08-21 20:11 - 00000000 ____D () C:\FRST
2014-08-19 14:06 - 2014-08-19 14:06 - 00000000 _____ () C:\Users\Nathalie94\defogger_reenable
2014-08-15 22:02 - 2014-08-15 22:02 - 00037096 _____ () C:\Users\Nathalie94\Downloads\Addition.txt
2014-08-15 21:53 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-15 21:53 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-15 21:53 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-15 21:53 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-15 21:53 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-15 21:53 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-15 21:53 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-15 21:53 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-15 21:53 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-15 21:53 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-15 21:52 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-15 21:52 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-15 21:52 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-15 21:52 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-15 21:52 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-15 21:52 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-15 21:52 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-15 21:52 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-15 21:52 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-15 21:52 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-15 21:52 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-15 21:52 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-15 21:52 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-15 21:52 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-15 21:52 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-15 21:52 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-15 21:52 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-15 21:52 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-15 21:52 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-15 21:52 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-15 21:52 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-15 21:52 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-15 21:52 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-15 21:52 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-15 21:52 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-15 21:52 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-15 21:52 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-15 21:52 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-15 21:52 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-15 21:52 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-15 21:52 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-15 21:52 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-15 21:51 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-15 21:51 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-15 21:48 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-08-15 21:48 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 21:48 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-08-15 21:48 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-15 21:48 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-15 21:48 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-08-15 21:46 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-08-15 21:46 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-08-15 21:46 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-08-15 21:46 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-08-15 21:46 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-08-15 21:46 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-08-15 21:46 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-08-15 21:46 - 2014-05-31 12:07 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-08-15 21:46 - 2014-05-31 12:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00419672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-08-15 21:46 - 2014-05-31 08:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-08-15 21:46 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-08-15 21:46 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-08-15 21:46 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-08-15 21:46 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-08-15 21:46 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-08-15 21:46 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-15 21:46 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-08-15 21:46 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-08-15 21:46 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-08-15 21:46 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-08-15 21:45 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-08-15 21:44 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-15 21:44 - 2014-08-07 00:39 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-15 21:44 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-03 15:12 - 2014-08-03 15:16 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Neuer Ordner
2014-08-01 15:27 - 2014-08-01 15:27 - 00002236 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-08-01 15:27 - 2014-08-01 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-08-01 15:26 - 2014-08-01 15:26 - 00895120 _____ (Google Inc.) C:\Users\Nathalie94\Downloads\GoogleEarthSetup.exe
2014-08-01 13:54 - 2014-08-02 02:17 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-01 13:54 - 2014-08-02 02:17 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-31 16:36 - 2014-08-21 19:55 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 16:36 - 2014-08-21 19:53 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 16:36 - 2014-08-21 19:47 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 16:36 - 2014-07-31 16:42 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 16:36 - 2014-07-31 16:42 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 16:36 - 2014-07-31 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Program Files (x86)\Check Point Software Technologies LTD
2014-07-31 11:54 - 2014-07-31 11:55 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Tante Uta Memory
2014-07-31 11:05 - 2014-07-31 11:06 - 00000000 ____D () C:\Users\Nathalie94\Downloads\Formulare
2014-07-31 10:46 - 2014-07-31 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-30 21:51 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-30 21:47 - 2014-08-03 15:16 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Flroida '14
2014-07-30 21:35 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-30 21:35 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-30 21:35 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-30 21:34 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-30 21:34 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-30 21:34 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-30 21:34 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-30 21:34 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-30 21:34 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-30 21:27 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-30 21:27 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-30 21:27 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-30 21:27 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-30 21:27 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-30 21:27 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-30 21:27 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-30 21:27 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-30 21:27 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-30 21:27 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-30 21:27 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-30 21:27 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-30 21:27 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-30 21:27 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-30 21:27 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-30 21:27 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-30 21:27 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-25 20:46 - 2014-08-15 21:38 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Iphone Nathalie

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 20:12 - 2014-06-09 17:11 - 00154802 _____ () C:\Users\Nathalie94\AppData\Local\BTServer.log
2014-08-21 20:11 - 2014-08-19 21:17 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Trojaner Board
2014-08-21 20:11 - 2014-08-19 14:10 - 00000000 ____D () C:\FRST
2014-08-21 20:11 - 2014-06-09 17:11 - 01436496 _____ () C:\Windows\WindowsUpdate.log
2014-08-21 20:10 - 2014-08-21 20:10 - 00000883 _____ () C:\Users\Nathalie94\Desktop\JRT.txt
2014-08-21 20:07 - 2014-06-09 17:17 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-573978712-1729818946-958835018-1001
2014-08-21 20:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-21 19:58 - 2014-08-21 19:58 - 00000000 ____D () C:\Windows\ERUNT
2014-08-21 19:55 - 2014-07-31 16:36 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-21 19:54 - 2014-08-21 19:54 - 00011519 _____ () C:\Users\Nathalie94\Desktop\AdwCleaner[S0].txt
2014-08-21 19:54 - 2014-06-09 17:12 - 00000000 ____D () C:\Users\Nathalie94\Documents\Youcam
2014-08-21 19:53 - 2014-07-31 16:36 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-21 19:53 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-21 19:52 - 2013-09-12 12:53 - 00218118 _____ () C:\Windows\PFRO.log
2014-08-21 19:51 - 2014-08-21 11:37 - 00000000 ____D () C:\AdwCleaner
2014-08-21 19:50 - 2014-06-09 17:11 - 00001021 _____ () C:\Users\Nathalie94\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-21 19:50 - 2014-03-19 07:52 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk
2014-08-21 19:50 - 2014-03-19 07:52 - 00001114 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk
2014-08-21 19:47 - 2014-07-31 16:36 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-21 13:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-08-21 11:34 - 2014-08-19 14:34 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-08-21 11:34 - 2013-08-22 16:44 - 00503240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-21 11:33 - 2014-06-26 23:24 - 00000000 ____D () C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9
2014-08-21 00:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-08-21 00:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-08-21 00:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-08-21 00:14 - 2014-06-17 17:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-21 00:14 - 2013-10-24 14:33 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-21 00:14 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-08-21 00:09 - 2014-06-14 17:33 - 00000000 ____D () C:\temp
2014-08-20 23:46 - 2014-08-20 23:46 - 01016261 _____ (Thisisu) C:\Users\Nathalie94\Downloads\JRT.exe
2014-08-20 23:45 - 2014-08-20 23:45 - 01361671 _____ () C:\Users\Nathalie94\Downloads\adwcleaner_3.307.exe
2014-08-20 23:39 - 2014-08-19 14:34 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-20 23:38 - 2014-08-20 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 23:37 - 2014-08-19 14:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 23:36 - 2014-08-20 23:35 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nathalie94\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 23:26 - 2014-08-20 23:26 - 00000902 _____ () C:\Users\Nathalie94\Desktop\Revo Uninstaller.lnk
2014-08-20 23:24 - 2014-08-20 23:24 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nathalie94\Downloads\revosetup95.exe
2014-08-19 15:15 - 2014-06-22 21:17 - 00000306 _____ () C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job
2014-08-19 14:14 - 2014-06-29 17:58 - 00008409 ____H () C:\Windows\SysWOW64\BTImages.dat
2014-08-19 14:06 - 2014-08-19 14:06 - 00000000 _____ () C:\Users\Nathalie94\defogger_reenable
2014-08-19 14:06 - 2014-06-09 17:11 - 00000000 ____D () C:\Users\Nathalie94
2014-08-19 14:04 - 2014-02-27 17:28 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-08-19 14:04 - 2014-02-27 17:28 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-08-19 14:04 - 2013-09-12 13:00 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-15 23:02 - 2014-06-09 17:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-15 23:02 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-08-15 23:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-15 22:02 - 2014-08-15 22:02 - 00037096 _____ () C:\Users\Nathalie94\Downloads\Addition.txt
2014-08-15 21:38 - 2014-07-25 20:46 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Iphone Nathalie
2014-08-15 21:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-15 21:26 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-08-15 21:15 - 2014-06-22 21:17 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-15 21:15 - 2014-06-22 21:17 - 00000000 ____D () C:\ProgramData\IObit
2014-08-12 17:08 - 2014-06-29 17:35 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Uni wichtige Dokumente
2014-08-10 15:30 - 2013-10-24 15:16 - 00048613 _____ () C:\Windows\setupact.log
2014-08-07 04:12 - 2014-08-15 21:44 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-07 00:39 - 2014-08-15 21:44 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-06 12:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-08-04 17:44 - 2014-02-27 17:28 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-08-04 17:44 - 2013-08-22 22:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\winrm
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\WCN
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\slmgr
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\IME
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing
2014-08-03 15:16 - 2014-08-03 15:12 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Neuer Ordner
2014-08-03 15:16 - 2014-07-30 21:47 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Flroida '14
2014-08-02 05:56 - 2014-08-15 21:44 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-02 05:11 - 2014-08-19 19:42 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-08-02 02:17 - 2014-08-01 13:54 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-02 02:17 - 2014-08-01 13:54 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-01 15:27 - 2014-08-01 15:27 - 00002236 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-08-01 15:27 - 2014-08-01 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-08-01 15:27 - 2014-06-14 17:28 - 00000000 ____D () C:\Users\Nathalie94\AppData\Local\Google
2014-08-01 15:27 - 2014-06-14 17:28 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-01 15:26 - 2014-08-01 15:26 - 00895120 _____ (Google Inc.) C:\Users\Nathalie94\Downloads\GoogleEarthSetup.exe
2014-08-01 13:53 - 2014-06-22 19:07 - 00431192 _____ () C:\Windows\system32\Drivers\vsconfig.xml
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB
2014-07-31 18:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-07-31 18:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-31 16:42 - 2014-07-31 16:36 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 16:42 - 2014-07-31 16:36 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 16:36 - 2014-07-31 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Program Files (x86)\Check Point Software Technologies LTD
2014-07-31 11:55 - 2014-07-31 11:54 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Tante Uta Memory
2014-07-31 11:10 - 2014-07-01 23:12 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Kita 2014
2014-07-31 11:06 - 2014-07-31 11:05 - 00000000 ____D () C:\Users\Nathalie94\Downloads\Formulare
2014-07-31 10:46 - 2014-07-31 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-31 10:46 - 2014-06-24 22:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-25 16:52 - 2014-08-15 21:53 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:51 - 2014-08-15 21:53 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:28 - 2014-08-15 21:52 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:25 - 2014-08-15 21:52 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-15 21:52 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:59 - 2014-08-15 21:52 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:40 - 2014-08-15 21:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-15 21:52 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:30 - 2014-08-15 21:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-15 21:53 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-15 21:52 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-15 21:52 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:17 - 2014-08-15 21:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:10 - 2014-08-15 21:52 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:08 - 2014-08-15 21:52 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-15 21:52 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-15 21:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-15 21:52 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-15 21:52 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-25 13:43 - 2014-08-15 21:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-15 21:52 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-15 21:52 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:34 - 2014-08-15 21:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-15 21:52 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-15 21:52 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-15 21:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:09 - 2014-08-15 21:52 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-25 13:07 - 2014-08-15 21:52 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:03 - 2014-08-15 21:52 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-15 21:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-15 21:52 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-15 21:52 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-15 21:52 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-15 21:52 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-15 21:52 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

Some content of TEMP:
====================
C:\Users\Nathalie94\AppData\Local\Temp\COMAP.EXE
C:\Users\Nathalie94\AppData\Local\Temp\nsnE4A1.tmp.exe
C:\Users\Nathalie94\AppData\Local\Temp\obexpf.dll
C:\Users\Nathalie94\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-06 14:28

==================== End Of Log ============================

--- --- ---

schrauber · 22.08.2014, 19:14

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Nathalie · 23.08.2014, 13:19

Hey Schrauber,

Vielen vielen herzlichen Dank, sofern ich das als Leihe erkennen kann ist mein Pc "gesäubert" . Es öffnen sich keine Seiten und Popups mehr und besonders diese blau unterstrichenen Wörter sind weg. Im Anhang die gewünschten Logfiles Eset Online Scanner hat noch 10 Dateien gefunden.

Ihre Arbeit war echt excellent und unglaublich schnell. Ich danke Ihnen für die genaue Erklärung so kann es "jeder" verstehen

, es hat sehr geholfen.

Eset Online Canner logfiles:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=12
esets_scanner_update returned -1 esets_gle=12
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=41fe328b4caf9a47a4681e8e2c700856
# engine=19799
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-08-23 11:42:15
# local_time=2014-08-23 01:42:15 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 1627048 13177656 0 0
# compatibility_mode_1='ZoneAlarm Antivirus'
# compatibility_mode=9221 16777213 100 98 5337326 24501933 0 0
# scanned=76972
# found=10
# cleaned=0
# scan_time=1611
sh=FCCC81753FF144DF0DC614E6540624E6C6F51139 ft=1 fh=2e068736e15e271d vn="Variante von MSIL/Solimba.AC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\FLVM Player\FLVPlayerUninstaller.exe.vir"
sh=1997580424FE070468F692B8F4641BF9B30BC5D0 ft=1 fh=24659b6f80c7090d vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default\Extensions\staged\ffxtlbr@zonealarm.com\uninstall.exe.vir"
sh=268979BC94F89E29C10C925824C49D5C9B5B1C09 ft=1 fh=029569cfdc034e29 vn="Variante von Win64/Adware.Adpeak.F Anwendung" ac=I fn="C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9\hmhfslexky64.exe"
sh=7E62CD24C68C6873E2367358E9B67F26B832DD4A ft=1 fh=c71c001152d7a4ca vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmApp.dll"
sh=AD188F10AB5A30A6EE8149A6AAF68247FC9E63E5 ft=1 fh=c71c00110d6f5af3 vn="möglicherweise Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmEng.dll"
sh=DA7464E58409B29B1ED2C7A65F3FD61402DAC1A5 ft=1 fh=dce5cbde4ee07593 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmsrv.exe"
sh=4280BD42B8746C3063C7FBEC9D0F026C3B32D1D3 ft=1 fh=66c52799588ff223 vn="Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmTlbr.dll"
sh=9F1F8446680FD61541FCC3E2B75E44E0EDCDFCAE ft=1 fh=e93b79f29aa9228b vn="Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\bh\zonealarm.dll"
sh=C25E453070C795849C94FCB0311ED1DDD4F7B74D ft=1 fh=a07ba6255bd749e6 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\CheckPoint\Install\CUninstallerZA.exe"
sh=AD9F3DAA348EEA4E74B2FAD65EA492F32CA72339 ft=1 fh=ce06389d744632d2 vn="Win32/Toolbar.Montiera.I evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\CheckPoint\Install\zatb.exe"

Security Check Logfiles:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.87  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender      
ZoneAlarm Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 	14.0.0.125  
 Mozilla Firefox (31.0) 
 Google Chrome 36.0.1985.125  
 Google Chrome 36.0.1985.143  
````````Process Check: objlist.exe by Laurent````````  
 CheckPoint ZoneAlarm vsmon.exe  
 CheckPoint ZoneAlarm ZAPrivacyService.exe  
 CheckPoint ZoneAlarm zatray.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

und mein hoffentlich letzter FRST logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-08-2014
Ran by Nathalie94 (administrator) on NATHALIE on 23-08-2014 14:08:34
Running from C:\Users\Nathalie94\Desktop\Trojaner Board
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\Program Files (x86)\PHotkey\POsd.exe
() C:\Program Files (x86)\PHotkey\GPMTray.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17044_x64__8wekyb3d8bbwe\glcnd.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-09-29] (Realtek Semiconductor Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2777840 2013-08-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-11-26] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [137352 2014-05-30] (Check Point Software Technologies Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-573978712-1729818946-958835018-1001\...\MountPoints2: {0fb35ca7-fde6-11e3-82a7-54271e5a91c6} - "F:\LaunchU3.exe" -a

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKCU - {353B757B-964B-46F1-BD00-A29ED1E1FB89} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=HFA5&Lan=DE&q={searchTerms}&gu=47155c9848d44533acbc2fad088f39b8&tu=10G9z00EZ1D20F0&sku=&tstsId=&ver=&&r=734
SearchScopes: HKCU - {5FFB80D7-DCDE-47F9-B4DC-35AA191E88FE} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_secureddownload_14_24_ch&cd=2XzuyEtN2Y1L1QzuyDyEtByBtC0EyD0AzytC0CyBtCzztDzztN0D0Tzu0SzzzyyBtN1L2XzutBtFtBtCtFyEtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StB0BzytDzyyCtBzztG0CtCtD0FtGtC0Dzz0CtGzy0A0AtBtGyCzztCyBtCyCyCyC0ByCyBtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0CyCzzzz0AtCtCtG0C0BzyyBtG0AtC0C0CtGtCyBzzyEtGtDtAyCyB0EtBtA0FyCyByCtD2Q&cr=1626871350&ir=
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Nathalie94\AppData\Roaming\Mozilla\Firefox\Profiles\4mmsfwzm.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-31]
CHR Extension: (Google Drive) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-31]
CHR Extension: (YouTube) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-31]
CHR Extension: (Adblock Plus) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-31]
CHR Extension: (Google-Suche) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-31]
CHR Extension: (ZoneAlarm Chrome Toolbar) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgdcapepedmpopjkmdbjnmmmfgllnfek [2014-07-31]
CHR Extension: (Google Wallet) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-31]
CHR Extension: (Google Mail) - C:\Users\Nathalie94\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-31]
CHR HKCU\...\Chrome\Extension: [kgdcapepedmpopjkmdbjnmmmfgllnfek] - C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD\zonealarm\1.8.29.17\zonealarm.crx [2014-02-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [61440 2013-09-26] () [File not signed]
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2175264 2014-06-22] (IObit)
R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [File not signed]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3592120 2014-05-30] (Check Point Software Technologies Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [90936 2014-05-29] (Check Point Software Technologies, Ltd.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [7717984 2014-04-30] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2014-04-30] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-04-30] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [490080 2014-04-30] (Kaspersky Lab ZAO)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)
R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [548056 2013-09-05] (Realtek Semiconductor Corporation)
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [2968280 2014-01-15] (Realtek Semiconductor Corporation                           )
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2945240 2013-09-12] (Realtek Semiconductor Corporation                           )
S3 SensorsHIDClassDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [450968 2014-05-30] (Check Point Software Technologies Ltd.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-23 14:06 - 2014-08-23 14:06 - 00000815 _____ () C:\Users\Nathalie94\Desktop\checkup.txt
2014-08-23 13:56 - 2014-08-23 13:56 - 00854417 _____ () C:\Users\Nathalie94\Downloads\SecurityCheck.exe
2014-08-23 13:01 - 2014-08-23 13:01 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-23 13:00 - 2014-08-23 13:01 - 02347384 _____ (ESET) C:\Users\Nathalie94\Downloads\esetsmartinstaller_deu.exe
2014-08-21 19:58 - 2014-08-21 19:58 - 00000000 ____D () C:\Windows\ERUNT
2014-08-21 19:49 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-21 11:37 - 2014-08-21 19:51 - 00000000 ____D () C:\AdwCleaner
2014-08-20 23:46 - 2014-08-20 23:46 - 01016261 _____ (Thisisu) C:\Users\Nathalie94\Downloads\JRT.exe
2014-08-20 23:45 - 2014-08-20 23:45 - 01361671 _____ () C:\Users\Nathalie94\Downloads\adwcleaner_3.307.exe
2014-08-20 23:38 - 2014-08-20 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 23:37 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-20 23:37 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-20 23:35 - 2014-08-20 23:36 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nathalie94\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 23:24 - 2014-08-20 23:24 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nathalie94\Downloads\revosetup95.exe
2014-08-20 23:08 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-08-20 23:08 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-08-20 23:08 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-08-20 23:08 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-08-20 23:08 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-08-20 23:08 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-08-20 23:08 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2014-08-20 23:08 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll
2014-08-20 23:08 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2014-08-20 23:08 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2014-08-20 23:08 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncobjapi.dll
2014-08-20 23:08 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedynos.dll
2014-08-20 23:08 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\framedyn.dll
2014-08-20 23:08 - 2014-05-03 01:26 - 00050745 _____ () C:\Windows\system32\srms.dat
2014-08-20 23:08 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-08-20 23:08 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys
2014-08-20 23:08 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-08-20 23:08 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2014-08-20 23:08 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
2014-08-20 23:08 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe
2014-08-20 23:08 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
2014-08-20 23:08 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-08-20 23:08 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-08-20 23:08 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-08-20 23:08 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2014-08-20 23:08 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-08-20 23:08 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-08-20 23:08 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2014-08-20 23:08 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-08-20 23:08 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-08-20 23:08 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2014-08-20 23:08 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-08-20 23:08 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-08-20 23:08 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-08-20 23:08 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-08-20 23:08 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2014-08-20 23:08 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-08-20 23:08 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-08-20 23:08 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-08-20 23:08 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-08-20 23:08 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-08-20 23:04 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-08-20 23:04 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-08-20 23:04 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-08-20 23:04 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-08-20 23:04 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-08-20 23:04 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-08-19 21:17 - 2014-08-23 14:08 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Trojaner Board
2014-08-19 19:42 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-08-19 14:34 - 2014-08-21 11:34 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-08-19 14:34 - 2014-08-20 23:39 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-19 14:34 - 2014-08-20 23:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-19 14:33 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-19 14:10 - 2014-08-23 14:08 - 00000000 ____D () C:\FRST
2014-08-19 14:06 - 2014-08-19 14:06 - 00000000 _____ () C:\Users\Nathalie94\defogger_reenable
2014-08-15 22:02 - 2014-08-15 22:02 - 00037096 _____ () C:\Users\Nathalie94\Downloads\Addition.txt
2014-08-15 21:53 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-15 21:53 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-15 21:53 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-15 21:53 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-15 21:53 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-15 21:53 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-15 21:53 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-15 21:53 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-15 21:53 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-15 21:53 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-15 21:52 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-15 21:52 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-15 21:52 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-15 21:52 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-15 21:52 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-15 21:52 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-15 21:52 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-15 21:52 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-15 21:52 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-15 21:52 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-15 21:52 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-15 21:52 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-15 21:52 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-15 21:52 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-15 21:52 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-15 21:52 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-15 21:52 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-15 21:52 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-15 21:52 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-15 21:52 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-15 21:52 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-15 21:52 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-15 21:52 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-15 21:52 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-15 21:52 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-15 21:52 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-15 21:52 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-15 21:52 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-15 21:52 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-15 21:52 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-15 21:52 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-15 21:52 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-15 21:51 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-15 21:51 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-15 21:48 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-08-15 21:48 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-15 21:48 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-08-15 21:48 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-15 21:48 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-15 21:48 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-08-15 21:46 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-08-15 21:46 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-08-15 21:46 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-08-15 21:46 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-08-15 21:46 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-08-15 21:46 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-08-15 21:46 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-08-15 21:46 - 2014-05-31 12:07 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-08-15 21:46 - 2014-05-31 12:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00419672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-08-15 21:46 - 2014-05-31 12:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-08-15 21:46 - 2014-05-31 08:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-08-15 21:46 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-08-15 21:46 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-08-15 21:46 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-08-15 21:46 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-08-15 21:46 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-08-15 21:46 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-08-15 21:46 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-08-15 21:46 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-08-15 21:46 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-08-15 21:46 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-08-15 21:45 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-08-15 21:44 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-15 21:44 - 2014-08-07 00:39 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-15 21:44 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-03 15:12 - 2014-08-03 15:16 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Neuer Ordner
2014-08-01 15:27 - 2014-08-01 15:27 - 00002236 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-08-01 15:27 - 2014-08-01 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-08-01 15:26 - 2014-08-01 15:26 - 00895120 _____ (Google Inc.) C:\Users\Nathalie94\Downloads\GoogleEarthSetup.exe
2014-08-01 13:54 - 2014-08-02 02:17 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-01 13:54 - 2014-08-02 02:17 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-31 16:36 - 2014-08-23 14:02 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-31 16:36 - 2014-08-23 14:01 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 16:36 - 2014-08-23 13:47 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 16:36 - 2014-07-31 16:42 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 16:36 - 2014-07-31 16:42 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 16:36 - 2014-07-31 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Program Files (x86)\Check Point Software Technologies LTD
2014-07-31 11:54 - 2014-07-31 11:55 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Tante Uta Memory
2014-07-31 11:05 - 2014-07-31 11:06 - 00000000 ____D () C:\Users\Nathalie94\Downloads\Formulare
2014-07-31 10:46 - 2014-07-31 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-30 21:51 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-30 21:47 - 2014-08-03 15:16 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Flroida '14
2014-07-30 21:35 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-30 21:35 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-30 21:35 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-30 21:34 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-30 21:34 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-30 21:34 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-30 21:34 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-30 21:34 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-30 21:34 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-30 21:27 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-30 21:27 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-30 21:27 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-30 21:27 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-30 21:27 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-30 21:27 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-30 21:27 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-30 21:27 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-30 21:27 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-30 21:27 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-30 21:27 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-30 21:27 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-30 21:27 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-30 21:27 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-30 21:27 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-30 21:27 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-30 21:27 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-25 20:46 - 2014-08-15 21:38 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Iphone Nathalie

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-23 14:08 - 2014-08-19 21:17 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Trojaner Board
2014-08-23 14:08 - 2014-08-19 14:10 - 00000000 ____D () C:\FRST
2014-08-23 14:06 - 2014-08-23 14:06 - 00000815 _____ () C:\Users\Nathalie94\Desktop\checkup.txt
2014-08-23 14:06 - 2014-06-09 17:17 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-573978712-1729818946-958835018-1001
2014-08-23 14:02 - 2014-07-31 16:36 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-23 14:02 - 2014-06-22 21:17 - 00000000 ____D () C:\ProgramData\ProductData
2014-08-23 14:02 - 2014-06-09 17:12 - 00000000 ____D () C:\Users\Nathalie94\Documents\Youcam
2014-08-23 14:02 - 2014-06-09 17:11 - 01531182 _____ () C:\Windows\WindowsUpdate.log
2014-08-23 14:01 - 2014-07-31 16:36 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-23 14:01 - 2014-06-09 17:11 - 00157891 _____ () C:\Users\Nathalie94\AppData\Local\BTServer.log
2014-08-23 14:00 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-23 14:00 - 2013-08-22 16:44 - 00503240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-23 13:56 - 2014-08-23 13:56 - 00854417 _____ () C:\Users\Nathalie94\Downloads\SecurityCheck.exe
2014-08-23 13:47 - 2014-07-31 16:36 - 00001136 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-23 13:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-08-23 13:01 - 2014-08-23 13:01 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-08-23 13:01 - 2014-08-23 13:00 - 02347384 _____ (ESET) C:\Users\Nathalie94\Downloads\esetsmartinstaller_deu.exe
2014-08-23 13:00 - 2014-02-27 17:28 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-08-23 13:00 - 2014-02-27 17:28 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-08-23 13:00 - 2013-09-12 13:00 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-23 12:59 - 2014-06-29 17:58 - 00008969 ____H () C:\Windows\SysWOW64\BTImages.dat
2014-08-21 19:58 - 2014-08-21 19:58 - 00000000 ____D () C:\Windows\ERUNT
2014-08-21 19:52 - 2013-09-12 12:53 - 00218118 _____ () C:\Windows\PFRO.log
2014-08-21 19:51 - 2014-08-21 11:37 - 00000000 ____D () C:\AdwCleaner
2014-08-21 19:50 - 2014-06-09 17:11 - 00001021 _____ () C:\Users\Nathalie94\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-21 19:50 - 2014-03-19 07:52 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk
2014-08-21 19:50 - 2014-03-19 07:52 - 00001114 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk
2014-08-21 13:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-08-21 11:34 - 2014-08-19 14:34 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-08-21 11:33 - 2014-06-26 23:24 - 00000000 ____D () C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9
2014-08-21 00:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-08-21 00:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-08-21 00:21 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-08-21 00:20 - 2014-06-17 17:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-21 00:14 - 2013-10-24 14:33 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-21 00:14 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-08-21 00:09 - 2014-06-14 17:33 - 00000000 ____D () C:\temp
2014-08-20 23:46 - 2014-08-20 23:46 - 01016261 _____ (Thisisu) C:\Users\Nathalie94\Downloads\JRT.exe
2014-08-20 23:45 - 2014-08-20 23:45 - 01361671 _____ () C:\Users\Nathalie94\Downloads\adwcleaner_3.307.exe
2014-08-20 23:39 - 2014-08-19 14:34 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-20 23:38 - 2014-08-20 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-08-20 23:37 - 2014-08-19 14:34 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 23:36 - 2014-08-20 23:35 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nathalie94\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 23:24 - 2014-08-20 23:24 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nathalie94\Downloads\revosetup95.exe
2014-08-19 15:15 - 2014-06-22 21:17 - 00000306 _____ () C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job
2014-08-19 14:06 - 2014-08-19 14:06 - 00000000 _____ () C:\Users\Nathalie94\defogger_reenable
2014-08-19 14:06 - 2014-06-09 17:11 - 00000000 ____D () C:\Users\Nathalie94
2014-08-15 23:02 - 2014-06-09 17:47 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-15 23:02 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-08-15 23:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-15 22:02 - 2014-08-15 22:02 - 00037096 _____ () C:\Users\Nathalie94\Downloads\Addition.txt
2014-08-15 21:38 - 2014-07-25 20:46 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Iphone Nathalie
2014-08-15 21:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-08-15 21:26 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-08-15 21:15 - 2014-06-22 21:17 - 00000000 ____D () C:\ProgramData\IObit
2014-08-12 17:08 - 2014-06-29 17:35 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Uni wichtige Dokumente
2014-08-10 15:30 - 2013-10-24 15:16 - 00048613 _____ () C:\Windows\setupact.log
2014-08-07 04:12 - 2014-08-15 21:44 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-07 00:39 - 2014-08-15 21:44 - 04148224 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-06 12:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-08-04 17:44 - 2014-02-27 17:28 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-08-04 17:44 - 2013-08-22 22:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\winrm
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\WCN
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\slmgr
2014-08-04 17:44 - 2013-08-22 22:57 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ___SD () C:\Windows\system32\dsc
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\IME
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-08-04 17:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-04 17:44 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing
2014-08-03 15:16 - 2014-08-03 15:12 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Neuer Ordner
2014-08-03 15:16 - 2014-07-30 21:47 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Flroida '14
2014-08-02 05:56 - 2014-08-15 21:44 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-02 05:11 - 2014-08-19 19:42 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-08-02 02:17 - 2014-08-01 13:54 - 00704480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-02 02:17 - 2014-08-01 13:54 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-01 15:27 - 2014-08-01 15:27 - 00002236 _____ () C:\Users\Public\Desktop\Google Earth.lnk
2014-08-01 15:27 - 2014-08-01 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-08-01 15:27 - 2014-06-14 17:28 - 00000000 ____D () C:\Users\Nathalie94\AppData\Local\Google
2014-08-01 15:27 - 2014-06-14 17:28 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-01 15:26 - 2014-08-01 15:26 - 00895120 _____ (Google Inc.) C:\Users\Nathalie94\Downloads\GoogleEarthSetup.exe
2014-08-01 13:53 - 2014-06-22 19:07 - 00431192 _____ () C:\Windows\system32\Drivers\vsconfig.xml
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-01 13:44 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB
2014-07-31 18:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-07-31 18:22 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-31 16:42 - 2014-07-31 16:36 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-31 16:42 - 2014-07-31 16:36 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-31 16:36 - 2014-07-31 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Users\Nathalie94\AppData\Roaming\Check Point Software Technologies LTD
2014-07-31 16:17 - 2014-07-31 16:17 - 00000000 ____D () C:\Program Files (x86)\Check Point Software Technologies LTD
2014-07-31 11:55 - 2014-07-31 11:54 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Tante Uta Memory
2014-07-31 11:10 - 2014-07-01 23:12 - 00000000 ____D () C:\Users\Nathalie94\Desktop\Kita 2014
2014-07-31 11:06 - 2014-07-31 11:05 - 00000000 ____D () C:\Users\Nathalie94\Downloads\Formulare
2014-07-31 10:46 - 2014-07-31 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-31 10:46 - 2014-06-24 22:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-25 16:52 - 2014-08-15 21:53 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:51 - 2014-08-15 21:53 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-25 15:28 - 2014-08-15 21:52 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 15:25 - 2014-08-15 21:52 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 15:25 - 2014-08-15 21:52 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:59 - 2014-08-15 21:52 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:40 - 2014-08-15 21:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 14:34 - 2014-08-15 21:52 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-25 14:30 - 2014-08-15 21:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-25 14:28 - 2014-08-15 21:53 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 14:28 - 2014-08-15 21:52 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 14:21 - 2014-08-15 21:52 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-25 14:17 - 2014-08-15 21:52 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 14:10 - 2014-08-15 21:52 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 14:08 - 2014-08-15 21:52 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-25 14:06 - 2014-08-15 21:52 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-25 13:52 - 2014-08-15 21:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-25 13:47 - 2014-08-15 21:52 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:43 - 2014-08-15 21:52 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-25 13:43 - 2014-08-15 21:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-25 13:42 - 2014-08-15 21:52 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:39 - 2014-08-15 21:52 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:34 - 2014-08-15 21:52 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-25 13:29 - 2014-08-15 21:52 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-25 13:23 - 2014-08-15 21:52 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 13:13 - 2014-08-15 21:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-25 13:09 - 2014-08-15 21:52 - 00291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-25 13:07 - 2014-08-15 21:52 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-25 13:03 - 2014-08-15 21:52 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-25 12:52 - 2014-08-15 21:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:26 - 2014-08-15 21:52 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-25 12:17 - 2014-08-15 21:52 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:09 - 2014-08-15 21:52 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-25 12:05 - 2014-08-15 21:52 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-25 12:00 - 2014-08-15 21:52 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

Some content of TEMP:
====================
C:\Users\Nathalie94\AppData\Local\Temp\COMAP.EXE
C:\Users\Nathalie94\AppData\Local\Temp\nsnE4A1.tmp.exe
C:\Users\Nathalie94\AppData\Local\Temp\obexpf.dll
C:\Users\Nathalie94\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-06 14:28

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 24.08.2014, 06:42

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Program Files (x86)\6DAF2CD5-832E-48EB-8678-2B122163A2D9
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Nathalie · 25.08.2014, 16:06

Danke vielmals für die tolle Unterstützung und Ihre Tipps!
Hier der Fixlog

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-08-2014 03
Ran by Nathalie94 at 2014-08-25 16:44:45 Run:1
Running from C:\Users\Nathalie94\Desktop\Trojaner Board
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:/Program Files (x86) /6DAF2CD5-832E-48EB-8678-2B122163A2D9
CHR HKLM/SOFTWARE/Pilicies/Google: Policy restriction <====== ATTENTION
*****************

C:/Program Files (x86) /6DAF2CD5-832E-48EB-8678-2B122163A2D9 => Error: No automatic fix found for this entry.
CHR HKLM/SOFTWARE/Pilicies/Google: Policy restriction <====== ATTENTION => Error: No automatic fix found for this entry.

==== End of Fixlog ====

Win 8:(Popup) Werbung, blau unterstrichene Hypelinks und es öffnen sich ungefragt Tabs

Log-Analyse und Auswertung: Win 8:(Popup) Werbung, blau unterstrichene Hypelinks und es öffnen sich ungefragt Tabs