Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 07.04.2014, 23:42   #1
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Hallo liebe Helfer vom Trojanerboard,

auf unserem PC hat sich vor wenigen Tagen wahrscheinlich mehrere Adwares und/oder Trojaner eingenistet, die ich nun mit eurer netten Hilfe beseitigen möchte.

Symptome: Nervige Werbung im Browser, mehrere (!) nicht absichtlich installierte Programme, sich öffnende Browserfenster

Nun die Scans:
Defogger:
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:21 on 07/04/2014 (Heidi und Kalle)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
FRST:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Heidi und Kalle (administrator) on HEIDIUNDKALLE on 07-04-2014 21:21:55
Running from C:\Users\Tobias\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(SANDBOXIE L.T.D) D:\Sandboxie\SbieSvc.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avgnt] - D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-402407132-709534727-3866883504-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20587168 2013-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-402407132-709534727-3866883504-1000\...\Run: [SandboxieControl] - D:\Sandboxie\SbieCtrl.exe [765200 2012-12-16] (SANDBOXIE L.T.D)
HKU\S-1-5-21-402407132-709534727-3866883504-1000\...\Run: [Browser Infrastructure Helper] - C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe startup
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
Startup: C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,
FF Keyword.URL: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - D:\Wichtige Programme\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SmartSaver+ 8 - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com [2014-03-31]
FF Extension: MediaPlayerplus - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [2014-03-31]
FF Extension: HQVid8 - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-03-31]
FF Extension: Quick Start - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\quick_start@gmail.com [2014-03-30]
FF Extension: Shopping Helper Smartbar - C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\{1468a6d9-2c9f-08da-f054-52ccaec0312a} [2014-03-30]
FF HKLM\...\Firefox\Extensions: [{77BEC163-D389-42c1-91A4-C758846296A5}] - C:\Program Files\Video downloader\Firefox
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-12]
FF HKCU\...\Firefox\Extensions: [{5ae66703-77f8-4623-8c81-9ba769053c03}] - C:\Program Files (x86)\Re-markit Corp\158.xpi
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522912 2012-12-14] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [906464 2012-12-14] (pdfforge GbR)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-07 21:21 - 2014-04-07 21:22 - 00017309 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:21 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:38 - 2014-04-07 18:43 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:28 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Tuguu_SL
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\newplayer
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-04-02 20:32 - 2014-04-02 20:43 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\ProgramData\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:19 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-03-30 21:01 - 2014-03-30 21:01 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Tuguu_SL
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:58 - 2014-04-07 18:45 - 00000000 ____D () C:\ProgramData\WPM
2014-03-30 20:58 - 2014-04-07 18:42 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\SupTab
2014-03-30 20:57 - 2014-03-30 20:59 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-03-30 20:57 - 2014-03-30 20:57 - 00001087 _____ () C:\Users\Heidi und Kalle\Desktop\MyPC Backup.lnk
2014-03-30 20:57 - 2014-03-30 20:57 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-03-30 20:56 - 2014-04-07 18:42 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 20:56 - 2014-03-30 20:56 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-03-30 20:55 - 2014-03-30 20:55 - 00000000 _____ () C:\END
2014-03-29 23:35 - 2014-03-29 23:35 - 00000000 ____D () C:\Users\Heidi\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-30 20:55 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Users\Kalle\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:04 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:03 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-13 16:30 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 16:30 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 16:30 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 16:30 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 16:30 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 16:30 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 16:30 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 16:30 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 16:30 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:30 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 16:30 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 16:30 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 16:30 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 16:30 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 16:30 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 16:30 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 16:30 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 16:30 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 16:30 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 16:30 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:30 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 16:30 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
2014-03-08 15:44 - 2014-04-07 21:13 - 00005331 _____ () C:\Windows\setupact.log
2014-03-08 15:44 - 2014-03-08 15:44 - 00000000 _____ () C:\Windows\setuperr.log

==================== One Month Modified Files and Folders =======

2014-04-07 21:22 - 2014-04-07 21:21 - 00017309 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:21 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-07 21:21 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-07 21:21 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2009-07-14 19:58 - 00702962 _____ () C:\Windows\system32\perfh007.dat
2014-04-07 21:19 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-04-07 21:19 - 2009-07-14 07:13 - 01629410 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 21:17 - 2012-12-21 21:29 - 01673489 _____ () C:\Windows\WindowsUpdate.log
2014-04-07 21:15 - 2013-07-14 22:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-07 21:13 - 2014-03-08 15:44 - 00005331 _____ () C:\Windows\setupact.log
2014-04-07 21:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-07 21:11 - 2013-07-14 22:43 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-07 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-07 20:44 - 2013-05-30 08:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-07 18:45 - 2014-03-30 20:58 - 00000000 ____D () C:\ProgramData\WPM
2014-04-07 18:45 - 2013-09-13 21:17 - 00599440 _____ () C:\Windows\PFRO.log
2014-04-07 18:43 - 2014-04-07 18:38 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:42 - 2014-03-30 20:58 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\SupTab
2014-04-07 18:42 - 2014-03-30 20:56 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage
2014-04-07 18:29 - 2014-04-07 21:19 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 18:29 - 2014-04-07 18:28 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Tuguu_SL
2014-04-04 22:36 - 2014-04-04 22:36 - 00000000 ____D () C:\Users\Kalle\AppData\Local\newplayer
2014-04-03 18:06 - 2013-07-14 22:43 - 00004124 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-03 18:06 - 2013-07-14 22:43 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:47 - 2012-12-29 21:59 - 00000000 ____D () C:\Users\Heidi
2014-04-02 20:43 - 2014-04-02 20:32 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-03-31 18:43 - 2013-06-17 09:44 - 00001474 _____ () C:\Windows\Sandboxie.ini
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\ProgramData\Activeris
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:01 - 2014-03-30 21:01 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Tuguu_SL
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:59 - 2014-03-30 20:57 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-03-30 20:57 - 2014-03-30 20:57 - 00001087 _____ () C:\Users\Heidi und Kalle\Desktop\MyPC Backup.lnk
2014-03-30 20:57 - 2014-03-30 20:57 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-03-30 20:57 - 2012-12-21 21:35 - 00000000 ___RD () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 20:56 - 2014-03-30 20:56 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-03-30 20:56 - 2013-01-26 14:07 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Mozilla
2014-03-30 20:56 - 2013-01-22 21:21 - 00001375 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-30 20:56 - 2012-12-21 21:35 - 00001661 _____ () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-30 20:55 - 2014-03-30 20:55 - 00000000 _____ () C:\END
2014-03-30 20:55 - 2014-03-29 21:41 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\SearchProtect
2014-03-29 23:35 - 2014-03-29 23:35 - 00000000 ____D () C:\Users\Heidi\AppData\Local\SearchProtect
2014-03-29 23:33 - 2013-01-22 21:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 21:44 - 2012-12-29 22:53 - 00000000 ____D () C:\Users\Kalle\AppData\Local\VirtualStore
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Users\Kalle\AppData\Local\SearchProtect
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 21:35 - 2012-12-30 19:35 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Apple Computer
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:07 - 2014-03-29 17:04 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:07 - 2014-03-29 17:03 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-23 17:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-18 19:28 - 2013-08-15 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 19:26 - 2012-12-25 01:47 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-13 19:51 - 2009-07-14 06:45 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 19:18 - 2012-12-21 21:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-12 10:45 - 2013-05-30 08:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:44 - 2013-05-27 21:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:44 - 2013-05-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-09 13:01 - 2012-12-29 22:52 - 01602754 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
2014-03-09 08:26 - 2012-12-30 19:33 - 00000000 ____D () C:\ProgramData\Apple
2014-03-08 15:44 - 2014-03-08 15:44 - 00000000 _____ () C:\Windows\setuperr.log

Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Heidi\AppData\Local\Temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\BackupSetup.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\shelper.exe
C:\Users\Heidi und Kalle\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Kalle\AppData\Local\Temp\avgnt.exe
C:\Users\Tobias\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 22:40

==================== End Of Log ============================
         
FRST Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Heidi und Kalle at 2014-04-07 21:22:49
Running from C:\Users\Tobias\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.3868 - CDBurnerXP)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version:  - ) <==== ATTENTION
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.0.0.10960 - Landesfinanzdirektion Thüringen)
fotokasten comfort 5.0 (HKLM-x32\...\fotokasten comfort_is1) (Version:  - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup  (HKLM\...\MyPC Backup) (Version:  - JDi Backup Ltd) <==== ATTENTION
Nero 9 Essentials (HKLM-x32\...\{f3c4baf4-c421-404a-a952-3544a9ff2dd3}) (Version:  - Nero AG)
Nero BurnRights (x32 Version: 3.4.10.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.9.203 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.6.100 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.202 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.10.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.204 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.207 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.1.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Pazera Free MP4 to AVI Converter 1.8 (HKLM-x32\...\{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1) (Version: 1.8 - Pazera Jacek)
PDF Architect (HKLM-x32\...\{09531CAE-B186-49A9-B44F-C607CC54FA2A}) (Version: 1.0.51.8724 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Shopping Helper Smartbar Engine (HKCU\...\{8b79a4e6-a39e-4fc5-9941-b14c4587d008}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-05-17 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1E317513-2DC4-4D40-A8E0-9EAE849AC03C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {43E8A059-8009-4F52-8B91-2C8717DF3CD6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {B8E36164-724D-4848-874E-1DE2701AF14C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B961ACFB-A8CF-47A3-8B7E-6CA13C64DDDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {E5E4FAA3-0FCD-4D3B-B70F-1B480A88D51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-12-25 12:29 - 2012-09-19 19:17 - 00397088 _____ () D:\Wichtige Programme\Avira\AntiVir Desktop\sqlite3.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-29 17:48 - 2014-03-29 17:48 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "D:\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: WinampAgent => D:\winamp\winampa.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/07/2014 09:06:21 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Name des fehlerhaften Moduls: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Ausnahmecode: 0x40000015
Fehleroffset: 0x000a0940
ID des fehlerhaften Prozesses: 0x590
Startzeit der fehlerhaften Anwendung: 0xHelperService.exe0
Pfad der fehlerhaften Anwendung: HelperService.exe1
Pfad des fehlerhaften Moduls: HelperService.exe2
Berichtskennung: HelperService.exe3

Error: (04/07/2014 06:29:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x45f4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/07/2014 06:29:38 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x45f0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/07/2014 06:29:31 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x45a0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/06/2014 08:57:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0xc1e4
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/06/2014 08:56:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x5688
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/06/2014 08:56:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x91bc
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/06/2014 08:56:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x8afc
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/06/2014 08:56:38 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0xc264
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (04/06/2014 08:51:37 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16521, Zeitstempel: 0x53114399
Name des fehlerhaften Moduls: jscript9.dll, Version: 11.0.9600.16521, Zeitstempel: 0x53115050
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00008a95
ID des fehlerhaften Prozesses: 0x84b0
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3


System errors:
=============
Error: (04/07/2014 09:14:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/07/2014 09:14:22 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (04/07/2014 09:06:22 PM) (Source: Service Control Manager) (User: )
Description: Dienst "PDF Architect Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/07/2014 06:51:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/07/2014 06:51:08 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (04/07/2014 06:47:39 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (04/07/2014 06:47:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/07/2014 06:47:02 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.

Error: (04/07/2014 04:25:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computer Backup (MyPC Backup)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/07/2014 04:25:49 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Computer Backup (MyPC Backup) erreicht.


Microsoft Office Sessions:
=========================
Error: (04/07/2014 09:06:21 PM) (Source: Application Error)(User: )
Description: HelperService.exe1.0.0.150cb2eafHelperService.exe1.0.0.150cb2eaf40000015000a094059001cf528193091a0eC:\Program Files (x86)\PDF Architect\HelperService.exeC:\Program Files (x86)\PDF Architect\HelperService.exeb45a9531-be87-11e3-a789-4487fc8017a4

Error: (04/07/2014 06:29:41 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9545f401cf527e90c422bcC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dlld12cda46-be71-11e3-a772-4487fc8017a4

Error: (04/07/2014 06:29:38 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9545f001cf527e90c5f783C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dllcf8fed1a-be71-11e3-a772-4487fc8017a4

Error: (04/07/2014 06:29:31 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9545a001cf527e824ac8dbC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dllcb4450a0-be71-11e3-a772-4487fc8017a4

Error: (04/06/2014 08:57:02 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a95c1e401cf51c9fbd02f4bC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll3c78eb77-bdbd-11e3-9630-4487fc8017a4

Error: (04/06/2014 08:56:55 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a95568801cf51c9f88a42e2C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll383dc1c7-bdbd-11e3-9630-4487fc8017a4

Error: (04/06/2014 08:56:43 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9591bc01cf51c9f19ca16dC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll3148a629-bdbd-11e3-9630-4487fc8017a4

Error: (04/06/2014 08:56:41 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a958afc01cf51c9f16f6748C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll304f03ac-bdbd-11e3-9630-4487fc8017a4

Error: (04/06/2014 08:56:38 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a95c26401cf51c8e73f0eb1C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll2e0a33e9-bdbd-11e3-9630-4487fc8017a4

Error: (04/06/2014 08:51:37 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.1652153114399jscript9.dll11.0.9600.1652153115050c000000500008a9584b001cf51c937baea4eC:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\jscript9.dll7b25c948-bdbc-11e3-9630-4487fc8017a4


CodeIntegrity Errors:
===================================
  Date: 2013-05-17 11:18:44.527
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-05-17 11:18:44.464
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 34%
Total physical RAM: 3959.12 MB
Available physical RAM: 2595.04 MB
Total Pagefile: 7916.41 MB
Available Pagefile: 6254.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.74 GB) (Free:11.82 GB) NTFS
Drive d: (Programme) (Fixed) (Total:19.64 GB) (Free:15.38 GB) NTFS
Drive e: (Bilder) (Fixed) (Total:43.95 GB) (Free:6.14 GB) NTFS
Drive f: (Musik) (Fixed) (Total:19.53 GB) (Free:10.54 GB) NTFS
Drive g: (Daten) (Fixed) (Total:17.09 GB) (Free:15.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0007C83B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=81 GB) - (Type=OF Extended)

==================== End Of Log ============================
         
Gmer
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-07 22:16:57
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-4 HITACHI_HTS722016K9SA00 rev.DCDZC75A 149,05GB
Running: Gmer-19357.exe; Driver: C:\Users\CHRIST~1\AppData\Local\Temp\ufdyrkog.sys


---- Threads - GMER 2.1 ----

Thread  C:\Windows\System32\svchost.exe [2852:1704]  000007feeda39688

---- EOF - GMER 2.1 ----
         
Zudem habe ich folgendes gemacht:

Der Scan von Windows Defender hat keine Fehler gemeldet.

Malwarebytes hingegen meldet über beim normalen Scan über 1500 (!) infizierte Objekte:
Datei zu groß, siehe Anhang

Antivir:
Code:
ATTFilter
Avira Free Antivirus
Erstellungsdatum der Reportdatei: Montag, 7. April 2014  22:36


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer   : Avira Antivirus Free
Seriennummer   : 0000149996-AVHOE-0000001
Plattform      : Windows 7 Professional
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus     : Normal gebootet
Benutzername   : Heidi und Kalle
Computername   : HEIDIUNDKALLE

Versionsinformationen:
BUILD.DAT      : 14.0.3.350     56624 Bytes  25.02.2014 11:41:00
AVSCAN.EXE     : 14.0.3.332   1058384 Bytes  20.02.2014 13:15:03
AVSCANRC.DLL   : 14.0.2.292     62008 Bytes  18.02.2014 11:44:59
LUKE.DLL       : 14.0.3.336     65616 Bytes  20.02.2014 13:15:04
AVSCPLR.DLL    : 14.0.3.336    124496 Bytes  20.02.2014 13:15:03
AVREG.DLL      : 14.0.3.336    250448 Bytes  20.02.2014 13:15:03
avlode.dll     : 14.0.3.336    544848 Bytes  20.02.2014 13:15:03
avlode.rdf     : 14.0.3.38      58680 Bytes  13.03.2014 14:27:26
VBASE000.VDF   : 7.11.70.0   66736640 Bytes  04.04.2013 17:44:01
VBASE001.VDF   : 7.11.74.226  2201600 Bytes  30.04.2013 17:43:10
VBASE002.VDF   : 7.11.80.60   2751488 Bytes  28.05.2013 15:30:43
VBASE003.VDF   : 7.11.85.214  2162688 Bytes  21.06.2013 13:18:55
VBASE004.VDF   : 7.11.91.176  3903488 Bytes  23.07.2013 20:18:12
VBASE005.VDF   : 7.11.98.186  6822912 Bytes  29.08.2013 17:44:21
VBASE006.VDF   : 7.11.139.38 15708672 Bytes  27.03.2014 18:29:53
VBASE007.VDF   : 7.11.139.39     2048 Bytes  27.03.2014 18:29:53
VBASE008.VDF   : 7.11.139.40     2048 Bytes  27.03.2014 18:29:53
VBASE009.VDF   : 7.11.139.41     2048 Bytes  27.03.2014 18:29:53
VBASE010.VDF   : 7.11.139.42     2048 Bytes  27.03.2014 18:29:53
VBASE011.VDF   : 7.11.139.43     2048 Bytes  27.03.2014 18:29:53
VBASE012.VDF   : 7.11.139.44     2048 Bytes  27.03.2014 18:29:53
VBASE013.VDF   : 7.11.139.45     2048 Bytes  27.03.2014 18:29:53
VBASE014.VDF   : 7.11.139.171   111104 Bytes  28.03.2014 16:30:23
VBASE015.VDF   : 7.11.140.23   150016 Bytes  30.03.2014 18:41:15
VBASE016.VDF   : 7.11.140.143   222720 Bytes  01.04.2014 17:51:11
VBASE017.VDF   : 7.11.140.235   144384 Bytes  03.04.2014 15:39:09
VBASE018.VDF   : 7.11.141.81   193536 Bytes  05.04.2014 11:44:33
VBASE019.VDF   : 7.11.141.82     2048 Bytes  05.04.2014 11:44:33
VBASE020.VDF   : 7.11.141.83     2048 Bytes  05.04.2014 11:44:33
VBASE021.VDF   : 7.11.141.84     2048 Bytes  05.04.2014 11:44:33
VBASE022.VDF   : 7.11.141.85     2048 Bytes  05.04.2014 11:44:33
VBASE023.VDF   : 7.11.141.86     2048 Bytes  05.04.2014 11:44:33
VBASE024.VDF   : 7.11.141.87     2048 Bytes  05.04.2014 11:44:33
VBASE025.VDF   : 7.11.141.88     2048 Bytes  05.04.2014 11:44:34
VBASE026.VDF   : 7.11.141.89     2048 Bytes  05.04.2014 11:44:34
VBASE027.VDF   : 7.11.141.90     2048 Bytes  05.04.2014 11:44:34
VBASE028.VDF   : 7.11.141.91     2048 Bytes  05.04.2014 11:44:34
VBASE029.VDF   : 7.11.141.92     2048 Bytes  05.04.2014 11:44:34
VBASE030.VDF   : 7.11.141.93     2048 Bytes  05.04.2014 11:44:34
VBASE031.VDF   : 7.11.141.176   219136 Bytes  07.04.2014 14:30:25
Engineversion  : 8.3.18.2  
AEVDF.DLL      : 8.3.0.4       118976 Bytes  21.03.2014 16:42:04
AESCRIPT.DLL   : 8.1.4.198     528584 Bytes  28.03.2014 16:30:23
AESCN.DLL      : 8.3.0.2       135360 Bytes  21.03.2014 16:42:04
AESBX.DLL      : 8.2.20.6     1331575 Bytes  13.01.2014 17:54:21
AERDL.DLL      : 8.2.0.138     704888 Bytes  02.12.2013 17:30:52
AEPACK.DLL     : 8.4.0.16      778440 Bytes  02.04.2014 17:51:11
AEOFFICE.DLL   : 8.3.0.2       201084 Bytes  13.03.2014 14:27:25
AEHEUR.DLL     : 8.1.4.1004   6643912 Bytes  03.04.2014 15:39:08
AEHELP.DLL     : 8.3.0.0       274808 Bytes  11.03.2014 19:40:37
AEGEN.DLL      : 8.1.7.24      442743 Bytes  11.03.2014 19:40:36
AEEXP.DLL      : 8.4.1.258     512376 Bytes  13.03.2014 14:27:26
AEEMU.DLL      : 8.1.3.2       393587 Bytes  19.09.2012 13:42:55
AECORE.DLL     : 8.3.0.6       241864 Bytes  19.03.2014 17:34:12
AEBB.DLL       : 8.1.1.4        53619 Bytes  05.11.2012 14:00:38
AVWINLL.DLL    : 14.0.3.252     23608 Bytes  20.02.2014 13:15:03
AVPREF.DLL     : 14.0.3.252     48696 Bytes  20.02.2014 13:15:03
AVREP.DLL      : 14.0.3.252    175672 Bytes  20.02.2014 13:15:03
AVARKT.DLL     : 14.0.3.336    256080 Bytes  20.02.2014 13:15:03
AVEVTLOG.DLL   : 14.0.3.336    165968 Bytes  20.02.2014 13:15:03
SQLITE3.DLL    : 3.7.0.1       397088 Bytes  19.09.2012 17:17:40
AVSMTP.DLL     : 14.0.3.252     60472 Bytes  20.02.2014 13:15:03
NETNT.DLL      : 14.0.3.252     13368 Bytes  20.02.2014 13:15:04
RCIMAGE.DLL    : 14.0.3.260   4979256 Bytes  20.02.2014 13:15:03
RCTEXT.DLL     : 14.0.3.282     72760 Bytes  20.02.2014 13:15:03

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Lokale Laufwerke
Konfigurationsdatei...................: D:\Wichtige Programme\Avira\AntiVir Desktop\alldrives.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:, E:, F:, G:, W:, X:, Y:, Z:, H:, 
Durchsuche aktive Programme...........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: aus
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Intelligente Dateiauswahl
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: Vollständig
Abweichende Gefahrenkategorien........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Beginn des Suchlaufs: Montag, 7. April 2014  22:36

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:, E:, F:, G:)'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'HDD1(W:)'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'HDD2(X:)'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'HDD3(Y:)'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'HDD4(Z:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '86' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '97' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '152' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'SbieSvc.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '85' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'AppleMobileDeviceService.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'BackupStack.exe' - '105' Modul(e) wurden durchsucht
Durchsuche Prozess 'mDNSResponder.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'NBService.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'HelperService.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'ConversionService.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '60' Modul(e) wurden durchsucht
Durchsuche Prozess 'iPodService.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '165' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'iTunesHelper.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '81' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '228' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '118' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '115' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '30' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '4149' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\setup.exe
    [0] Archivtyp: NSIS
    --> [PluginsDir]/WrapperUtils.dll
        [FUND]      Enthält Erkennungsmuster der Adware ADWARE/Agent.71168
        [WARNUNG]   Infizierte Dateien in Archiven können nicht repariert werden
Beginne mit der Suche in 'D:\' <Programme>
Beginne mit der Suche in 'E:\' <Bilder>
Beginne mit der Suche in 'F:\' <Musik>
Beginne mit der Suche in 'G:\' <Daten>
Beginne mit der Suche in 'W:\'
Der zu durchsuchende Pfad W:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'X:\'
Der zu durchsuchende Pfad X:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'Y:\'
Der zu durchsuchende Pfad Y:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'Z:\'
Der zu durchsuchende Pfad Z:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.
Beginne mit der Suche in 'H:\'
Der zu durchsuchende Pfad H:\ konnte nicht geöffnet werden!
Systemfehler [21]: Das Gerät ist nicht bereit.

Beginne mit der Desinfektion:
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\setup.exe
  [FUND]      Enthält Erkennungsmuster der Adware ADWARE/Agent.71168
  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5555b692.qua' verschoben!


Ende des Suchlaufs: Montag, 7. April 2014  23:36
Benötigte Zeit: 59:45 Minute(n)

Der Suchlauf wurde vollständig durchgeführt.

  36189 Verzeichnisse wurden überprüft
 501475 Dateien wurden geprüft
      1 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      1 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 501474 Dateien ohne Befall
   5605 Archive wurden durchsucht
      1 Warnungen
      1 Hinweise
         
Nun hoffe ich, dass ihr mir weiter helfen könnt und ich um das neu aufsetzen des PCs noch einmal herumkomme.

Ich würde mich sehr über eure Hilfe freuen

Viele Grüße und einen schönen Abend,
chris0806

Alt 08.04.2014, 01:11   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Hi,

die Logs von Malwarebytes bitte direkt in CODE-Tags posten


Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 08.04.2014, 07:17   #3
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Hallo lieber cosinus,

danke für Deine Hilfe! Hier der Log, den ich wegen der maximalen Länge von 120.000 Zeichen pro Post auf zwei Posts aufteilen muss:

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.04.07.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Christoph :: HEIDIUNDKALLE [administrator]

07.04.2014 16:31:53
MBAM-log-2014-04-07 (18-19-16).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 519156
Time elapsed: 1 hour(s), 13 minute(s), 5 second(s)

Memory Processes Detected: 5
C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager) -> 1548 -> No action taken.
C:\Program Files (x86)\LPT\srpts.exe (PUP.Optional.Linkury.A) -> 2916 -> No action taken.
C:\Program Files\V-bates\ExtensionUpdaterService.exe (PUP.Optional.VbatesHelper.A) -> 3268 -> No action taken.
C:\ProgramData\IePluginService\PluginService.exe (PUP.Optional.IePluginService.A) -> 1508 -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe (PUP.Optional.ReMarkit.A) -> 1204 -> No action taken.

Memory Modules Detected: 7
C:\Program Files (x86)\LPT\Smartbar.Common.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Communication.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srpt.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srptc.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\SupTab\DpInterface32.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.dll (PUP.Optional.ReMarkIt.A) -> No action taken.

Registry Keys Detected: 59
HKLM\SYSTEM\CurrentControlSet\Services\Wpm (PUP.Optional.WpManager) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM (PUP.Optional.WpManager) -> No action taken.
HKCR\CLSID\{11111111-1111-1111-1111-110411891126} (PUP.Optional.SmartSaver.A) -> No action taken.
HKCR\TypeLib\{44444444-4444-4444-4444-440444894426} (PUP.Optional.SmartSaver.A) -> No action taken.
HKCR\Interface\{55555555-5555-5555-5555-550455895526} (PUP.Optional.SmartSaver.A) -> No action taken.
HKCR\CrossriderApp0048926.BHO.1 (PUP.Optional.SmartSaver.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411891126} (PUP.Optional.SmartSaver.A) -> No action taken.
HKCR\CLSID\{11111111-1111-1111-1111-110511421146} (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKCR\TypeLib\{44444444-4444-4444-4444-440544424446} (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKCR\Interface\{55555555-5555-5555-5555-550555425546} (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKCR\CrossriderApp0054246.BHO.1 (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146} (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKCR\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> No action taken.
HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D} (PUP.Optional.SupTab.A) -> No action taken.
HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} (PUP.Optional.SupTab.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> No action taken.
HKCR\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> No action taken.
HKCR\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13} (PUP.Optional.VBates) -> No action taken.
HKCR\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} (PUP.Optional.VBates) -> No action taken.
HKCR\Extension.ExtensionHelperObject.1 (PUP.Optional.VBates) -> No action taken.
HKCR\Extension.ExtensionHelperObject (PUP.Optional.VBates) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> No action taken.
HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} (PUP.Optional.QuickShare.A) -> No action taken.
HKCR\IESmartBar.BHO (PUP.Optional.QuickShare.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} (PUP.Optional.QuickShare.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\89e5787b-04b6-4eac-a003-2cc6d81fc47b (PUP.Optional.ReMarkIt.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\LPTSystemUpdater (PUP.Optional.Linkury.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\V-bates Updater (PUP.Optional.VbatesHelper.A) -> No action taken.
HKCR\CrossriderApp0048926.BHO (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0048926.Sandbox (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0048926.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0053172.BHO (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0053172.BHO.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0053172.Sandbox (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0053172.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0054246.BHO (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0054246.Sandbox (PUP.Optional.CrossRider.A) -> No action taken.
HKCR\CrossriderApp0054246.Sandbox.1 (PUP.Optional.CrossRider.A) -> No action taken.
HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> No action taken.
HKCU\Software\AppDataLow\Software\HQVid8 (PUP.Optional.HQVid.A) -> No action taken.
HKCU\Software\AppDataLow\Software\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKCU\Software\AppDataLow\Software\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken.
HKLM\SOFTWARE\V-bates (PUP.Optional.VbatesHelper.A) -> No action taken.
HKLM\SOFTWARE\InstalledBrowserExtensions\21636 (PUP.Optional.CrossRider.A) -> No action taken.
HKLM\SOFTWARE\InstalledBrowserExtensions\26549 (PUP.Optional.CrossRider.A) -> No action taken.
HKLM\SOFTWARE\InstalledBrowserExtensions\27058 (PUP.Optional.CrossRider.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\IePluginService (PUP.Optional.IePluginService.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\Re-markit (PUP.Optional.ReMarkit.A) -> No action taken.
HKLM\Software\HQVid8 (PUP.Optional.HQVid.A) -> No action taken.
HKLM\Software\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken.
HKLM\Software\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken.
HKLM\Software\webssearchesSoftware (PUP.Optional.WebsSearches.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken.
HKCR\CLSID\{11111111-1111-1111-1111-110511311172} (PUP.Optional.HQVid.A) -> No action taken.
HKCR\TypeLib\{44444444-4444-4444-4444-440544314472} (PUP.Optional.HQVid.A) -> No action taken.
HKCR\Interface\{55555555-5555-5555-5555-550555315572} (PUP.Optional.HQVid.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311172} (PUP.Optional.HQVid.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQVid8 (PUP.Optional.HQVid.A) -> No action taken.

Registry Values Detected: 8
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Data: C:\Program Files\V-bates\Firefox -> No action taken.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{77BEC163-D389-42c1-91A4-C758846296A5} (PUP.Optional.VideoDownloader.A) -> Data:  -> No action taken.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{77BEC163-D389-42c1-91A4-C758846296A5} (PUP.Optional.VideoDownloader.A) -> Data: C:\Program Files\Video downloader\Firefox -> No action taken.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Data:  -> No action taken.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings|ProxyServer (PUM.Bad.Proxy) -> Data: http=127.0.0.1:13828 -> No action taken.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|quick_start@gmail.com (PUP.Optional.QuickStart.A) -> Data: C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\quick_start@gmail.com -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\LPTSystemUpdater|ImagePath (PUP.Optional.Linkury.A) -> Data: "C:\Program Files (x86)\LPT\srpts.exe" -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\Wpm|ImagePath (PUP.Optional.WpManager.A) -> Data: C:\ProgramData\WPM\wprotectmanager.exe -service -> No action taken.

Registry Data Items Detected: 7
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.SupTab.A) -> Bad: (C:\PROGRA~2\SupTab\SEARCH~1.DLL) Good: () -> No action taken.
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command| (PUP.Optional.WebsSearches.A) -> Bad: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://istart.webssearches.com/?type=sc&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (firefox.exe) -> No action taken.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command| (PUP.Optional.WebsSearches.A) -> Bad: ("C:\Program Files (x86)\Internet Explorer\iexplore.exe" hxxp://istart.webssearches.com/?type=sc&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (iexplore.exe) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.WebsSearches.A) -> Bad: (hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}) Good: (www.google.com) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.WebsSearches.A) -> Bad: (hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (www.google.com) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl|Default (PUP.Optional.SnapDo.A) -> Bad: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}) Good: (www.google.com) -> No action taken.
HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.WebsSearches.A) -> Bad: (hxxp://istart.webssearches.com/?type=hp&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX) Good: (www.google.com) -> No action taken.

Folders Detected: 86
C:\Program Files (x86)\MediaPlayerplus (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Resources (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Configs (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Resources (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\SupTab (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\en-US (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\es-419 (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\es-ES (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-BE (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-CA (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-CH (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-FR (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-LU (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\it-CH (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\it-IT (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\pl (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\pt-BR (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\ru (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\ru-MO (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\tr-TR (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\vi-VI (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\zh-CN (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\zh-TW (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files\V-bates (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content\libraries (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content\resources (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\locale (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\locale\en-US (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\skin (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\defaults (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\defaults\preferences (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\libraries (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\resources (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ar (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Configs (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\de (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\es (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\fr (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\he (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\it (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\nl (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\pt (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ru (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\tr (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\Configs (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Profiles (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\RollBack (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles (PUP.Optional.SmartBar.A) -> No action taken.
C:\ProgramData\IePluginService (PUP.Optional.IePluginService.A) -> No action taken.
C:\ProgramData\IePluginService\update (PUP.Optional.IePluginService.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8 (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Program Files (x86)\HQVid8 (PUP.Optional.HQVid.A) -> No action taken.

Files Detected: 1402
C:\ProgramData\WPM\wprotectmanager.exe (PUP.Optional.WpManager) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho.dll (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho.dll (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files\V-bates\Extension32.dll (PUP.Optional.VBates) -> No action taken.
C:\Program Files (x86)\HQVid8\utils.exe (PUP.Optional.CrossRider.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bg.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-codedownloader.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\utils.exe (PUP.Optional.CrossRider.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\ReMar.exe (PUP.Optional.AdLyrics.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Uninstall.exe (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-2.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-3.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-4.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-5.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bg.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-codedownloader.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\utils.exe (PUP.Optional.CrossRider.A) -> No action taken.
C:\Program Files (x86)\SupTab\RSHP.exe (PUP.Optional.IEPluginService.A) -> No action taken.
C:\Users\Heidi\Downloads\solitaire setup.exe (PUP.Optional.BundleInstaller.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4XNW587V\spstub[1].exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCOZOP27\sp-downloader[1].exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HZTDKV20\SPSetup[1].exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\nsdE6CC.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\nst2DDD.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\nstE3CF.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\nsy30BB.exe (PUP.Optional.SearchProtect.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\android.exe (Backdoor.Bot) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\spidentifierimpl.exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\mediaplayerplus.exe (PUP.Optional.CrossRider.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\Re-markit_2040-2082.exe (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\tugs_webssearches.exe (PUP.Optional.SkyTech.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\0c8d983e-764f-4e38-a59c-5630792275c8\software\VOPackage.exe (PUP.Optional.SilenceInstall) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\4fc0fcce-c7d6-4fdc-9aaa-b18f5c572be7\android.exe (Backdoor.Bot) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\android\android.exe (Backdoor.Bot) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\f53a40a2-762c-4173-b5d2-c40338dde320\android.exe (Backdoor.Bot) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\f53a40a2-762c-4173-b5d2-c40338dde320\software\ShoppinHelper2_Setup_2.exe (PUP.Optional.ShoppingHelper.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\alilog.dll (PUP.Optional.SkyTech.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\package1.zip (PUP.Optional.SkyTech.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\tmp\SupTab.exe (PUP.Optional.SupTab.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\fullpackage_temp1396205776\tmp\wpm.exe (PUP.Optional.WpManager) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\nsyAF37\SpSetup.exe (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\Installer.msi (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage\Uninstall.exe (PUP.Optional.SilenceInstall) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage\VOPackage.exe (PUP.Optional.SilenceInstall) -> No action taken.
C:\Users\Kalle\Downloads\winamp563_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Windows\Installer\280343.msi (PUP.Optional.SmartBar.A) -> No action taken.
C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-1.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-2.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-3.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-4.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\1d58acf1-29e5-4c8e-a536-e04dd320ab01-5.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-1.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-2.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-3.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-4.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\72cb4a48-c55b-4f72-a0c6-43dec13bb2d2-5.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-1.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-2.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-3.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-4.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Windows\Tasks\9b0b99bf-8395-4071-85ce-258ecccd2e05-5.job (PUP.Optional.CrossRider.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\background.html (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\54246.crx (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\54246.xpi (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus.ico (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\MediaPlayerplus\Uninstall.exe (PUP.Optional.MediaPlayerplus.A) -> No action taken.
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\webssearches.xml (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Windows\Tasks\Re-markit Update.job (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Windows\Tasks\Re-markit_wd.job (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\PublisherSettings.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\FiddlerCore.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\HtmlAgilityPack.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\linmsl.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\LPTInstaller.msi (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Newtonsoft.Json.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Proxy.pac (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Common.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Communication.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Communication.NamedPipe.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyService.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Personalization.Common.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\sppsm.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\spusm.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srbs.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srbu.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\sreu.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srpdm.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srprl.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srpt.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srptc.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srptm.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srptm.exe.config (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\srut.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\UserSettings.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs\BrowserSettings.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs\LPTMapping.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Configs\Timers.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\LPT\Resources\LPT.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\PublisherSettings.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\FiddlerCore.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\HtmlAgilityPack.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\linmsl.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Newtonsoft.Json.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Proxy.pac (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Common.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Communication.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\sppsm.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\spusm.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srbs.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srbu.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\sreu.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srpdm.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srprl.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srpt.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srptc.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srptm.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srptm.exe.config (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srpts.exe (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\srut.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\System.Data.SQLite.dll (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\UserSettings.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Configs\LPTMapping.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Configs\Timers.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\LPT\Resources\LPT.xml (PUP.Optional.Linkury.A) -> No action taken.
C:\Program Files (x86)\SupTab\install.data (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\DpInterface32.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\DpInterface64.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\DpInterfacef32.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\ient.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\SearchProtect32.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\SearchProtect64.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\SpAPPSv32.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\SpAPPSv64.dll (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\uninstall.exe (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\indexIE.html (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\indexIE8.html (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\style.css (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\ver.txt (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\default_logo.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\icon128.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\icon16.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\icon48.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\loading.gif (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\0.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\1.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\10.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\11.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\12.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\13.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\14.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\15.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\16.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\17.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\18.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\19.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\2.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\20.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\21.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\22.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\23.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\24.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\25.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\26.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\27.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\28.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\29.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\3.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\30.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\31.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\32.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\33.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\34.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\35.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\36.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\37.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\38.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\39.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\4.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\40.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\41.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\42.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\43.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\44.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\45.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\46.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\47.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\5.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\6.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\7.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\8.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\img\weather\9.png (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js\background.js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js\ga.js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js\jquery-base.js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js\js.js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\js\xagainit.js (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json (PUP.Optional.SupTab.A) -> No action taken.
C:\Program Files\V-bates\source.crx (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\DGChrome.exe (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Extension64.dll (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\ExtensionUpdaterService.exe (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\InstallerHelper.dll (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\NMHClient.exe (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\NMHClient.json (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\PrefHelper.exe (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\unins000.dat (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\unins000.exe (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome.manifest (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\icon.png (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\install.rdf (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content\main.js (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content\main.xul (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content\libraries\DataExchangeScript.js (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\content\resources\LocalScript.js (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\locale\en-US\overlay.dtd (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\chrome\skin\overlay.css (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\Firefox\defaults\preferences\defaults.js (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\libraries\DataExchangeScript.js (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Program Files\V-bates\resources\LocalScript.js (PUP.Optional.VbatesHelper.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\GuidCreator.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\5tlstlf3.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\Installer.exe.config (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioData.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\TVData.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1001276787.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1032580196.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1049633276.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1087330818.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\10910262.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1104610067.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1147580050.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1163213760.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1204718153.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\121835881.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\122472738.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1230328089.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1298762877.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1310107020.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1326063932.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1345014714.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1349390236.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1369710219.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1373235683.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1386532862.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1394199207.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1407761077.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1415894710.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1418938224.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1424569337.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1448618572.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1481822820.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1493636833.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1509927059.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1517724479.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\154459894.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\155412559.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1669310521.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1679097045.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\168641980.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1758576778.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1761620300.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1772830074.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\179336091.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1804880237.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1893260371.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1924605918.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\1955680767.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2030579034.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2035413131.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2042360304.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2054100928.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2085154025.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2098956121.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2100782698.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2132085398.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2133340426.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2135235822.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2157068549.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2172383622.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2188799041.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2197254446.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2237253885.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2299189749.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2314318620.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2319664488.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2351760750.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2352788679.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2434806465.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2448178934.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2527570036.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2538377536.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2538400399.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2540923269.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2558778520.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2571747616.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2583444921.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2587409586.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2590608011.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2591439044.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2612287955.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2628037879.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2653061757.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2675558977.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2710200799.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\273527147.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2751319937.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2776020400.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2787724300.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2797249473.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2842060987.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\285939796.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2931527065.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2952973582.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\2984351418.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3033724325.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3042219480.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3063365749.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3064150577.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3082581872.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\309514462.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3120382369.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3122142557.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3165264072.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3182409528.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3184054012.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3187131776.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\319401273.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3232831230.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3233771152.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3250796059.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3278133524.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3282864392.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3308340081.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3329535649.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\333136190.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3353459484.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3369034760.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3383800463.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3386776517.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3423014897.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3453891725.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3458352640.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3489211912.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3498988851.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3500507916.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\355292266.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3561459644.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3590131191.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3596627549.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3620542188.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3663645435.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3696038166.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3702168251.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3741228717.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3763336611.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3766425313.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3789643263.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3813878146.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3814325319.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3823133617.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3823177572.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3835949179.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3837055614.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3847014217.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3855687987.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3856427893.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3862616577.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3864747753.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3872957308.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3885036774.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3887458186.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3890543285.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3944243447.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3948768214.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3966688001.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3970689814.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3976347681.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\3994114319.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\40007619.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4032896534.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4040521507.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4047869151.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4059135308.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4108659329.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4111842662.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4124855599.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4156122664.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4160168922.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4162666780.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4180019228.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\42509276.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4258041623.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\426489121.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\4289669010.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\439796844.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\446498293.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\462705098.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\502425151.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\505295175.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\554680345.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\573901993.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\610494985.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\620039489.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\647184093.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\652777024.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\655303227.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\735399138.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\765389517.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\767227599.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\768979132.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\788754019.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\813749843.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\876609851.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\881006563.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\90069336.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\90299962.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\918057842.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Temp\smartbar\RadioTVIcons\953710841.gif (PUP.Optional.SmartBar.A) -> No action taken.
C:\ProgramData\IePluginService\PluginService.exe (PUP.Optional.IePluginService.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.exe (PUP.Optional.ReMarkit.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\BrowserHelper.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\BrowserHelper.exe.config (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ChromeHost.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\DomainBlackList.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\FiddlerCore.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\HtmlAgilityPack.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\IEButton.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Interop.SHDocVw.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Interop.WMPLib.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\lrcnt.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Lrcnta.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\MACTrackBarLib.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.mshtml.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Common.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Microsoft.Practices.ObjectBuilder.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\NDde.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Newtonsoft.Json.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ProductsRemovalTool.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Proxy.pac (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\RegAsm.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sb.host.json (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sgml.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sgmu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sidb.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\siem.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sipb.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sismlp.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Common.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Communication.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Communication.NamedPipe.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe.config (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Monetization.Proxy.ProxyRemover.exe (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Monetization.Proxy.ProxyService.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.Resources.Translations.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInstallationIcon.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarShortcutIcon.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.config (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\smta.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\smtu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spbe.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spbl.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sppsm.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spsm.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\spusm.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srau.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srbhu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srbs.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srbu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sreu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srgu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srns.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srom.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srpdm.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srprl.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srpu.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srsbs.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srsbsau.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srsl.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\sruhs.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srus.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\srut.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\System.Data.SQLite.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.html (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\manifest.json (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.htm (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.html (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.html (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS\border.css (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fb.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fblike.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\gmail.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\google.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\googleplus.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\left.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\mgsplusvideo.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\pinit.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\right.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\searchBox.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\twitter.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\alxbl.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\BackPageRemove.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\defaultBlockList.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\documentEvents.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\externalJS.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\FBImagePreview.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\filters.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\generalBackButtonDetection.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\InternalJS.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\jquery-1.9.0.min.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\PluginWrapper.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\publisherDefinitions.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\ta.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\tabReload.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\TopFrameJS.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\trans.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper128.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper16.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper48.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome.manifest (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\install.rdf (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\BackPageRemove.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\externalJS.js (PUP.Optional.SmartBar.A) -> No action taken.
         
__________________

Alt 08.04.2014, 07:20   #4
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Code:
ATTFilter
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FBImagePreview.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.css (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.xul (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\InternalJS.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\jquery-1.5.1.min.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\publisherDefinitions.js (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fb.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fblike.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\gmail.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\googleplus.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\left.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\mgsplusvideo.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\pinit.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\right.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\searchBox.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\twitter.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper128.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper16.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper_small.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\ISmartbarFireFoxRemotePlugin.xpt (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\Configs\UserInfo.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FD.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBE.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EAB.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367D.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.ico (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056press.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\youtube.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\youtubehover.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\iconsWide\youtubepress.png (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Common\ServicesPlugins\spup.dll (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Local\Smartbar\DistributionFiles\Profiles\3C6BEA24-8B0E-4EDE-82EC-536F56750CD5.xml (PUP.Optional.SmartBar.A) -> No action taken.
C:\ProgramData\IePluginService\update\conf (PUP.Optional.IePluginService.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\48926.crx (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\48926.xpi (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\background.html (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8.ico (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\SmartSaver+ 8\Uninstall.exe (PUP.Optional.SmartSaver.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\158.crx (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\158.dat (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\158.xpi (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\a.db (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\b.db (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.bin (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.dll (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit158.ini (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Program Files (x86)\Re-markit Corp\Sqlite3.dll (PUP.Optional.ReMarkIt.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\92.json (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\uninstallDlg.xml (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\UninstallManager.exe (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\bg1.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\button1.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\checked.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\close.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\min.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\Thumbs.db (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Users\Heidi und Kalle\AppData\Roaming\webssearches\images\unchecked.png (PUP.Optional.WebsSearches.A) -> No action taken.
C:\Program Files (x86)\HQVid8\53172.crx (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\53172.xpi (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-2.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-3.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-4.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\9b0b99bf-8395-4071-85ce-258ecccd2e05-5.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\background.html (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-bg.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-bho.dll (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8-codedownloader.exe (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\HQVid8.ico (PUP.Optional.HQVid.A) -> No action taken.
C:\Program Files (x86)\HQVid8\Uninstall.exe (PUP.Optional.HQVid.A) -> No action taken.

(end)
         

Alt 08.04.2014, 10:18   #5
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Zitat:
Microsoft Office Professional Edition 2003

Plattform : Windows 7 Professional
Windowsversion : (Service Pack 1) [6.1.7601]
Wird der Rechner auch gewerblich genutzt oder gibt es andere Gründe dafür, dass du ein Professional Windows und Office hast?

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 08.04.2014, 10:27   #6
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Hallo lieber cosinus,

ich habe die Version über das MSDNAA-Programm erhalten und der PC wird nicht gewerblich genutzt, sondern rein privat.

Viele Grüße,
chris

Alt 08.04.2014, 10:38   #7
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Ok. Dir ist aber auch klar, dass heute nicht nur Windows XP sondern auch Office 2003 stillgelegt wird? Danach bekommt man keine weiteren Updates mehr für Office 2003. Heißt also du müsstest sinnigerweise updaten oder zB zu LibreOffice wechseln.


Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 08.04.2014, 11:22   #8
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Danke cosinus,
ja das Office 2003 Problem lösen wir durch - wahrscheinlich - einen Neuerwerb. Danke trotzdem für den Hinweis.

AdwCleander:
Code:
ATTFilter
# AdwCleaner v3.023 - Bericht erstellt am 08/04/2014 um 10:59:46
# Aktualisiert 01/04/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Christoph - HEIDIUNDKALLE
# Gestartet von : C:\Users\Christoph\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : BackupStack

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Activeris
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Local\Tuguu_SL
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Activeris
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\VOPackage
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
Ordner Gelöscht : C:\Users\Heidi\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Kalle\AppData\Local\NewPlayer
Ordner Gelöscht : C:\Users\Kalle\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Kalle\AppData\Local\Tuguu_SL
Ordner Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\Extensions\quick_start@gmail.com
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
Datei Gelöscht : C:\Users\Heidi und Kalle\Desktop\MyPC Backup.lnk
Datei Gelöscht : C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\343m8jo1.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\searchplugins\Web Search.xml

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{77BEC163-D389-42c1-91A4-C758846296A5}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Schlüssel Gelöscht : HKCU\Software\8578cddb669ec12
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422892226}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422246}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466896626}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422892226}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422246}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466896626}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426646}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\Video downloader
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Video downloader
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1453d99c025f4121b1477de51c4f9e07");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]

[ Datei : C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1451e333f6e614fec14d6c02ae8c1197");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]

[ Datei : C:\Users\Tobias\AppData\Roaming\Mozilla\Firefox\Profiles\343m8jo1.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]

[ Datei : C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "1453c947733268c0eb29346628f21b1e");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]

[ Datei : C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\prefs.js ]

Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "145145eaba17021dd2f08badcf7759b5");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1F[...]
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_istart.webssearches.com", "not set");
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_VBATES_partn_time_search.snapdo.com", "not set");
Zeile gelöscht : user_pref("{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}.ScriptData_whiteListSearch", "{\"isearch.babylon.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"home.mywebsearch.com\":\"se[...]

*************************

AdwCleaner[R0].txt - [15039 octets] - [08/04/2014 10:49:59]
AdwCleaner[S0].txt - [13878 octets] - [08/04/2014 10:59:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13939 octets] ##########
         
JRT:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Christoph on 08.04.2014 at 11:04:37,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-402407132-709534727-3866883504-1003\Software\video downloader
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411891126}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511311172}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511421146}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411891126}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511311172}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511421146}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"



~~~ FireFox

Emptied folder: C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3tl74osf.default\minidumps [11 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2014 at 11:10:04,76
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
FRST:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 26 days old and could be outdated)
Ran by Christoph (administrator) on HEIDIUNDKALLE on 08-04-2014 11:17:33
Running from C:\Users\Christoph\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(SANDBOXIE L.T.D) D:\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avgnt] - D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA48B17742811CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - D:\Wichtige Programme\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HQVid8 - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-07]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-12]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522912 2012-12-14] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [906464 2012-12-14] (pdfforge GbR)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-08 11:17 - 2014-04-08 11:17 - 00031631 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:15 - 2014-04-08 11:17 - 00010991 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-08 11:10 - 2014-04-08 11:11 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 10:49 - 2014-04-08 11:00 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:18 - 2014-04-08 07:21 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 23:25 - 2014-04-07 23:40 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 22:07 - 2014-04-07 22:18 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 21:54 - 2014-04-07 22:16 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:45 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:22 - 2014-04-07 21:23 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:21 - 2014-04-08 11:17 - 00000000 ____D () C:\FRST
2014-04-07 21:21 - 2014-04-07 21:23 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:38 - 2014-04-07 18:43 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:28 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-04-02 20:32 - 2014-04-02 20:43 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:19 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:04 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:03 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-13 16:30 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 16:30 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 16:30 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 16:30 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 16:30 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 16:30 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 16:30 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 16:30 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 16:30 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:30 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 16:30 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 16:30 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 16:30 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 16:30 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 16:30 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 16:30 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 16:30 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 16:30 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 16:30 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 16:30 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 16:30 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:30 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 16:30 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod

==================== One Month Modified Files and Folders =======

2014-04-08 11:17 - 2014-04-08 11:17 - 00031631 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:17 - 2014-04-08 11:15 - 00010991 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-08 11:17 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-08 11:16 - 2012-12-21 21:29 - 01720775 _____ () C:\Windows\WindowsUpdate.log
2014-04-08 11:14 - 2013-07-14 22:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-08 11:13 - 2014-03-08 15:44 - 00005667 _____ () C:\Windows\setupact.log
2014-04-08 11:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-08 11:12 - 2013-07-14 22:43 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-08 11:11 - 2014-04-08 11:10 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:09 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-08 11:09 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 11:00 - 2014-04-08 10:49 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:59 - 2013-01-22 21:21 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-08 10:59 - 2012-12-21 21:35 - 00000000 ___RD () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:21 - 2014-04-08 07:18 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-08 07:16 - 2009-07-14 19:58 - 00702962 _____ () C:\Windows\system32\perfh007.dat
2014-04-08 07:16 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-04-08 07:16 - 2009-07-14 07:13 - 01629474 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-07 23:44 - 2013-05-30 08:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-07 23:40 - 2014-04-07 23:25 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 22:18 - 2014-04-07 22:07 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 22:16 - 2014-04-07 21:54 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:23 - 2014-04-07 21:22 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:23 - 2014-04-07 21:21 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-07 18:45 - 2013-09-13 21:17 - 00599440 _____ () C:\Windows\PFRO.log
2014-04-07 18:43 - 2014-04-07 18:38 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:29 - 2014-04-07 21:19 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 18:29 - 2014-04-07 18:28 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 21:45 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-03 18:06 - 2013-07-14 22:43 - 00004124 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-03 18:06 - 2013-07-14 22:43 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:47 - 2012-12-29 21:59 - 00000000 ____D () C:\Users\Heidi
2014-04-02 20:43 - 2014-04-02 20:32 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-03-31 18:43 - 2013-06-17 09:44 - 00001474 _____ () C:\Windows\Sandboxie.ini
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2014-03-30 20:56 - 00000512 __RSH () C:\ProgramData\ntuser.pol
2014-03-30 20:56 - 2013-01-26 14:07 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Mozilla
2014-03-30 20:56 - 2012-12-21 21:35 - 00001661 _____ () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-29 23:33 - 2013-01-22 21:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 21:44 - 2012-12-29 22:53 - 00000000 ____D () C:\Users\Kalle\AppData\Local\VirtualStore
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 21:35 - 2012-12-30 19:35 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Apple Computer
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:07 - 2014-03-29 17:04 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:07 - 2014-03-29 17:03 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-23 17:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-18 19:28 - 2013-08-15 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-18 19:26 - 2012-12-25 01:47 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-13 19:51 - 2009-07-14 06:45 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 19:18 - 2012-12-21 21:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-12 10:45 - 2013-05-30 08:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:44 - 2013-05-27 21:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:44 - 2013-05-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-09 13:01 - 2012-12-29 22:52 - 01602754 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-09 08:29 - 2014-03-09 08:29 - 00001449 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iTunes
2014-03-09 08:29 - 2014-03-09 08:29 - 00000000 ____D () C:\Program Files\iPod
2014-03-09 08:26 - 2012-12-30 19:33 - 00000000 ____D () C:\ProgramData\Apple

Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\temp\avgnt.exe
C:\Users\Christoph\AppData\Local\temp\Quarantine.exe
C:\Users\Heidi\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\BackupSetup.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\shelper.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\vcredist_x64.exe
C:\Users\Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Tobias\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 22:40

==================== End Of Log ============================
         
--- --- ---

--- --- ---


und

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Christoph at 2014-04-08 11:17:54
Running from C:\Users\Christoph\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.3868 - CDBurnerXP)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version:  - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version:  - ) <==== ATTENTION
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.0.0.10960 - Landesfinanzdirektion Thüringen)
fotokasten comfort 5.0 (HKLM-x32\...\fotokasten comfort_is1) (Version:  - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{f3c4baf4-c421-404a-a952-3544a9ff2dd3}) (Version:  - Nero AG)
Nero BurnRights (x32 Version: 3.4.10.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.9.203 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.6.100 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.202 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.10.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.204 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.207 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.1.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Pazera Free MP4 to AVI Converter 1.8 (HKLM-x32\...\{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1) (Version: 1.8 - Pazera Jacek)
PDF Architect (HKLM-x32\...\{09531CAE-B186-49A9-B44F-C607CC54FA2A}) (Version: 1.0.51.8724 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

08-04-2014 08:50:46 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-05-17 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1E317513-2DC4-4D40-A8E0-9EAE849AC03C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {43E8A059-8009-4F52-8B91-2C8717DF3CD6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {B8E36164-724D-4848-874E-1DE2701AF14C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B961ACFB-A8CF-47A3-8B7E-6CA13C64DDDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {E5E4FAA3-0FCD-4D3B-B70F-1B480A88D51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-12-25 12:29 - 2012-09-19 19:17 - 00397088 _____ () D:\Wichtige Programme\Avira\AntiVir Desktop\sqlite3.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "D:\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: WinampAgent => D:\winamp\winampa.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/08/2014 11:15:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37
Name des fehlerhaften Moduls: xul.dll, Version: 28.0.0.5186, Zeitstempel: 0x53240e04
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00184729
ID des fehlerhaften Prozesses: 0xd6c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (04/08/2014 11:15:37 AM) (Source: Application Error)(User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c000000500184729d6c01cf530af2a0ac21C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll585b13ce-befe-11e3-a7de-4487fc8017a4


CodeIntegrity Errors:
===================================
  Date: 2013-05-17 11:18:44.527
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-05-17 11:18:44.464
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 3959.12 MB
Available physical RAM: 2727.71 MB
Total Pagefile: 7916.41 MB
Available Pagefile: 6506.5 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.74 GB) (Free:11.39 GB) NTFS
Drive d: (Programme) (Fixed) (Total:19.64 GB) (Free:15.38 GB) NTFS
Drive e: (Bilder) (Fixed) (Total:43.95 GB) (Free:6.14 GB) NTFS
Drive f: (Musik) (Fixed) (Total:19.53 GB) (Free:10.54 GB) NTFS
Drive g: (Daten) (Fixed) (Total:17.09 GB) (Free:15.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0007C83B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=81 GB) - (Type=OF Extended)

==================== End Of Log ============================
         
Der Browser funktioniert auf den ersten Blick wieder normal!

Vielen Dank und liebe Grüße,
chris

edit: Soll ich bei JRT noch auf "fix" gehen? Ich halte das Programm solange noch offen

Alt 08.04.2014, 12:47   #9
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
C:\PROGRA~2\SupTab
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
C:\Program Files (x86)\SmartSaver+ 8
C:\Program Files (x86)\HQVid8
C:\Program Files (x86)\MediaPlayerplus
C:\Program Files\V-bates
FF Extension: HQVid8 - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-07]
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 08.04.2014, 20:33   #10
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Guten Abend

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Christoph at 2014-04-08 20:30:03 Run:1
Running from C:\Users\Christoph\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
C:\PROGRA~2\SupTab
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:13828
BHO: SmartSaver+ 8 - {11111111-1111-1111-1111-110411891126} - C:\Program Files (x86)\SmartSaver+ 8\SmartSaver+ 8-bho64.dll No File
BHO: HQVid8 - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQVid8\HQVid8-bho64.dll No File
BHO: MediaPlayerplus - {11111111-1111-1111-1111-110511421146} - C:\Program Files (x86)\MediaPlayerplus\MediaPlayerplus-bho64.dll No File
BHO: V-bates - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension64.dll No File
C:\Program Files (x86)\SmartSaver+ 8
C:\Program Files (x86)\HQVid8
C:\Program Files (x86)\MediaPlayerplus
C:\Program Files\V-bates
FF Extension: HQVid8 - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-04-07]
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
         
*****************

"C:\\PROGRA~2\\SupTab\\SEARCH~2.DLL" => Value Data removed successfully.
"C:\PROGRA~2\SupTab" => File/Directory not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411891126} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411891126} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311172} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110511311172} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110511421146} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} => Key deleted successfully.
HKCR\CLSID\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} => Key deleted successfully.
"C:\Program Files (x86)\SmartSaver+ 8" => File/Directory not found.
"C:\Program Files (x86)\HQVid8" => File/Directory not found.
"C:\Program Files (x86)\MediaPlayerplus" => File/Directory not found.
"C:\Program Files\V-bates" => File/Directory not found.
C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com => Moved successfully.
C:\ProgramData\PKP_DLes.DAT => Moved successfully.
C:\ProgramData\PKP_DLet.DAT => Moved successfully.
C:\ProgramData\PKP_DLev.DAT => Moved successfully.


The system needed a reboot. 

==== End of Fixlog ====
         
Was mir noch auffällt ist, das Firefox bei jedem Neustart, trotz geänderter Einstellungen, über einen Proxyserver verbinden will.
Ich stelle es immer wieder zurück, aber wenn ich den Browser schließe und anschließend wieder öffne, kann er wieder keine Verbindung herststellen, weil er dies über einen Proxyserver tun will.
Startseiten lassen sich auch nicht festlegen, sondern es wird jedesmal wieder auf die ursprüngliche von firefox resettet.

Liebe Grüße

Geändert von chris0806 (08.04.2014 um 20:46 Uhr) Grund: Grammatik

Alt 09.04.2014, 13:00   #11
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 11.04.2014, 18:59   #12
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Hallo und einen schönen Freitag Abend,

hier die FRST-logs:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 29 days old and could be outdated)
Ran by Christoph (administrator) on HEIDIUNDKALLE on 11-04-2014 18:52:19
Running from C:\Users\Christoph\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(SANDBOXIE L.T.D) D:\Sandboxie\SbieSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) D:\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [avgnt] - D:\Wichtige Programme\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - D:\Treiber\Grafikkarte\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xA48B17742811CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Java\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3tl74osf.default
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - D:\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - D:\Wichtige Programme\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-12]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; D:\Wichtige Programme\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Wichtige Programme\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522912 2012-12-14] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [906464 2012-12-14] (pdfforge GbR)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [123664 2012-12-16] (SANDBOXIE L.T.D)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [202632 2012-12-16] (SANDBOXIE L.T.D)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-10 06:05 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-10 06:05 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-10 06:05 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-10 06:05 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-10 06:05 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-10 06:05 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-10 06:05 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-10 06:05 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-10 06:05 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-10 06:05 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-10 06:05 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-10 06:05 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-10 06:05 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-10 06:05 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-10 06:05 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-10 06:05 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-10 06:05 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-08 11:31 - 2014-04-08 11:31 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-08 11:18 - 2014-04-08 11:18 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition2.txt
2014-04-08 11:17 - 2014-04-08 11:18 - 00031819 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:17 - 2014-04-08 11:18 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition.txt
2014-04-08 11:15 - 2014-04-11 18:53 - 00010283 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-08 11:10 - 2014-04-08 11:11 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 10:49 - 2014-04-08 11:00 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:18 - 2014-04-08 07:21 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 23:25 - 2014-04-07 23:40 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 22:07 - 2014-04-07 22:18 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 21:54 - 2014-04-07 22:16 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:45 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:22 - 2014-04-07 21:23 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:21 - 2014-04-11 18:52 - 00000000 ____D () C:\FRST
2014-04-07 21:21 - 2014-04-07 21:23 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 21:19 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 21:19 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:38 - 2014-04-07 18:43 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:28 - 2014-04-07 18:29 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-04-02 20:32 - 2014-04-02 20:43 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 21:19 - 2012-09-26 19:03 - 00020480 _____ () C:\Windows\system32\acrisnative64.exe
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2014-04-08 20:31 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:04 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:03 - 2014-03-29 17:07 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-13 16:30 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 16:30 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 16:30 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 16:30 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 16:30 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 16:30 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 16:30 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:30 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 16:30 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 16:30 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 16:30 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 16:30 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 16:30 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 16:30 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 16:30 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 16:30 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 16:30 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 16:30 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 16:30 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 16:30 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 16:30 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 16:30 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 16:30 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 16:30 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 16:30 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 16:30 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 16:30 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 16:30 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 16:30 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 16:28 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

==================== One Month Modified Files and Folders =======

2014-04-11 18:53 - 2014-04-08 11:15 - 00010283 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-04-11 18:52 - 2014-04-07 21:21 - 00000000 ____D () C:\FRST
2014-04-11 18:50 - 2014-03-08 15:44 - 00007302 _____ () C:\Windows\setupact.log
2014-04-11 18:50 - 2013-07-14 22:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-11 18:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-11 16:51 - 2012-12-21 21:29 - 01201618 _____ () C:\Windows\WindowsUpdate.log
2014-04-11 16:44 - 2013-05-30 08:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-11 16:18 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-11 16:18 - 2009-07-14 06:45 - 00016896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-10 21:11 - 2013-07-14 22:43 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-10 06:53 - 2009-07-14 04:34 - 00000499 _____ () C:\Windows\win.ini
2014-04-10 06:52 - 2013-08-15 07:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 06:52 - 2012-12-21 21:48 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 06:50 - 2012-12-25 01:47 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 19:08 - 2009-07-14 19:58 - 00702962 _____ () C:\Windows\system32\perfh007.dat
2014-04-09 19:08 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-04-09 19:08 - 2009-07-14 07:13 - 01629474 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-09 17:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-08 20:31 - 2014-03-30 20:56 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-04-08 20:30 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-04-08 11:31 - 2014-04-08 11:31 - 02157056 _____ (Farbar) C:\Users\Christoph\Downloads\FRST64.exe
2014-04-08 11:18 - 2014-04-08 11:18 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition2.txt
2014-04-08 11:18 - 2014-04-08 11:17 - 00031819 _____ () C:\Users\Christoph\Desktop\FRST2.txt
2014-04-08 11:18 - 2014-04-08 11:17 - 00024742 _____ () C:\Users\Christoph\Desktop\Addition.txt
2014-04-08 11:11 - 2014-04-08 11:10 - 00001986 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-04-08 11:04 - 2014-04-08 11:04 - 00000000 ____D () C:\Windows\ERUNT
2014-04-08 11:03 - 2014-04-08 11:03 - 00014128 _____ () C:\Users\Christoph\Desktop\AdwCleaner[S0].txt
2014-04-08 11:00 - 2014-04-08 10:49 - 00000000 ____D () C:\AdwCleaner
2014-04-08 10:59 - 2013-01-22 21:21 - 00001049 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-08 10:59 - 2012-12-21 21:35 - 00000000 ___RD () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-08 10:48 - 2014-04-08 10:48 - 01426178 _____ () C:\Users\Christoph\Desktop\adwcleaner.exe
2014-04-08 10:48 - 2014-04-08 10:48 - 01016261 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-04-08 07:21 - 2014-04-08 07:18 - 00119941 _____ () C:\Users\Christoph\Desktop\Neues Textdokument.txt
2014-04-07 23:40 - 2014-04-07 23:25 - 00086723 _____ () C:\Users\Tobias\Desktop\fürs board.txt
2014-04-07 23:37 - 2014-04-07 23:37 - 00016065 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.zip
2014-04-07 23:36 - 2014-04-07 23:36 - 00000000 ____D () C:\Users\Tobias\AppData\Roaming\WinRAR
2014-04-07 23:29 - 2014-04-07 23:29 - 00214996 _____ () C:\Users\Tobias\Desktop\Scan von Malwarebytes.txt
2014-04-07 22:18 - 2014-04-07 22:07 - 00289279 _____ () C:\Users\Christoph\Desktop\neu2.txt
2014-04-07 22:16 - 2014-04-07 21:54 - 00000429 _____ () C:\Users\Christoph\Desktop\gmer.log
2014-04-07 21:53 - 2014-04-07 21:53 - 00000000 _____ () C:\Users\Christoph\Documents\gmer.log
2014-04-07 21:37 - 2014-04-07 21:37 - 00000000 _____ () C:\Users\Tobias\Desktop\Gmer.log
2014-04-07 21:23 - 2014-04-07 21:22 - 00034816 _____ () C:\Users\Tobias\Desktop\Addition.txt
2014-04-07 21:23 - 2014-04-07 21:21 - 00038006 _____ () C:\Users\Tobias\Desktop\FRST.txt
2014-04-07 21:21 - 2014-04-07 21:21 - 00000492 _____ () C:\Users\Tobias\Desktop\defogger_disable.log
2014-04-07 21:20 - 2014-04-07 21:20 - 00000000 _____ () C:\Users\Tobias\Desktop\vorgenesweise.txt
2014-04-07 18:45 - 2013-09-13 21:17 - 00599440 _____ () C:\Windows\PFRO.log
2014-04-07 18:43 - 2014-04-07 18:38 - 00215579 _____ () C:\Users\Christoph\Desktop\neu.txt
2014-04-07 18:29 - 2014-04-07 21:19 - 02157056 _____ (Farbar) C:\Users\Tobias\Desktop\FRST64.exe
2014-04-07 18:29 - 2014-04-07 18:28 - 02157056 _____ (Farbar) C:\Users\Christoph\Desktop\FRST64.exe
2014-04-07 18:28 - 2014-04-07 21:45 - 00380416 _____ () C:\Users\Christoph\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00380416 _____ () C:\Users\Tobias\Desktop\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 21:19 - 00050477 _____ () C:\Users\Tobias\Desktop\Defogger.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00380416 _____ () C:\Users\Christoph\Downloads\Gmer-19357.exe
2014-04-07 18:28 - 2014-04-07 18:28 - 00050477 _____ () C:\Users\Christoph\Downloads\Defogger.exe
2014-04-07 16:31 - 2014-04-07 16:31 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-04-06 20:48 - 2014-04-06 20:48 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51 (1).com
2014-04-06 20:47 - 2014-04-06 20:47 - 00921512 _____ (Oracle Corporation) C:\Users\Kalle\Downloads\JavaSetup7u51.com
2014-04-03 18:06 - 2013-07-14 22:43 - 00004124 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-03 18:06 - 2013-07-14 22:43 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-02 20:47 - 2014-04-02 20:47 - 00009421 _____ () C:\Users\Heidi\ESt2012_plata_roswitha.elfo
2014-04-02 20:47 - 2012-12-29 21:59 - 00000000 ____D () C:\Users\Heidi
2014-04-02 20:43 - 2014-04-02 20:32 - 00008058 _____ () C:\Users\Heidi\ESt2010_plata_roswitha.elfo
2014-04-02 20:42 - 2014-04-02 20:42 - 00009911 _____ () C:\Users\Heidi\ESt2011_plata_roswitha.elfo
2014-03-31 18:43 - 2013-06-17 09:44 - 00001474 _____ () C:\Windows\Sandboxie.ini
2014-03-31 03:16 - 2014-04-10 06:05 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-10 06:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-10 06:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-10 06:05 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 21:19 - 2014-03-30 21:19 - 00001158 _____ () C:\Users\Public\Desktop\Activeris AntiMalware.lnk
2014-03-30 21:19 - 2014-03-30 21:19 - 00000000 ____D () C:\Program Files (x86)\Activeris AntiMalware
2014-03-30 20:59 - 2014-03-30 20:59 - 00001969 _____ () C:\Users\Heidi und Kalle\Desktop\Sync Folder.lnk
2014-03-30 20:56 - 2013-01-26 14:07 - 00000000 ____D () C:\Users\Heidi und Kalle\AppData\Local\Mozilla
2014-03-30 20:56 - 2012-12-21 21:35 - 00001661 _____ () C:\Users\Heidi und Kalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-30 20:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-29 23:33 - 2013-01-22 21:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-29 21:44 - 2012-12-29 22:53 - 00000000 ____D () C:\Users\Kalle\AppData\Local\VirtualStore
2014-03-29 21:41 - 2014-03-29 21:41 - 00001271 _____ () C:\Users\Public\Desktop\Pazera Free MP4 to AVI Converter.lnk
2014-03-29 21:41 - 2014-03-29 21:41 - 00000000 ____D () C:\Program Files (x86)\pazera-software
2014-03-29 21:39 - 2014-03-29 21:39 - 07333520 _____ (Pazera Jacek ) C:\Users\Kalle\Downloads\Pazera_Free_MP4_to_AVI_Converter18.exe
2014-03-29 21:35 - 2012-12-30 19:35 - 00000000 ____D () C:\Users\Kalle\AppData\Local\Apple Computer
2014-03-29 17:48 - 2014-03-29 17:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 17:07 - 2014-03-29 17:04 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley)(1).mp4
2014-03-29 17:07 - 2014-03-29 17:03 - 13502229 _____ () C:\Users\Kalle\Downloads\Stars On 45 - More Stars (Abba Medley).mp4
2014-03-23 17:49 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-13 19:51 - 2009-07-14 06:45 - 00342952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 19:50 - 2013-11-23 17:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 10:45 - 2013-05-30 08:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:44 - 2013-05-27 21:39 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:44 - 2013-05-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\temp\avgnt.exe
C:\Users\Christoph\AppData\Local\temp\Quarantine.exe
C:\Users\Heidi\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\BackupSetup.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\shelper.exe
C:\Users\Heidi und Kalle\AppData\Local\temp\vcredist_x64.exe
C:\Users\Kalle\AppData\Local\temp\avgnt.exe
C:\Users\Tobias\AppData\Local\temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-31 22:40

==================== End Of Log ============================
         
--- --- ---


und Addition:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Christoph at 2014-04-11 18:53:33
Running from C:\Users\Christoph\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Activeris AntiMalware (HKLM-x32\...\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1) (Version: 1.0.0.1 - Activeris)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 12.5.100.21219 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1084.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{5E03A267-415E-5383-FA8F-3CE4145663B9}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.71219.1540 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.3868 - CDBurnerXP)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version:  - ) <==== ATTENTION
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.0.0.10960 - Landesfinanzdirektion Thüringen)
fotokasten comfort 5.0 (HKLM-x32\...\fotokasten comfort_is1) (Version:  - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Corporation (Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Corporation (x32 Version: 9.1.0.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Essentials (HKLM-x32\...\{f3c4baf4-c421-404a-a952-3544a9ff2dd3}) (Version:  - Nero AG)
Nero BurnRights (x32 Version: 3.4.10.100 - Nero AG) Hidden
Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden
Nero CoverDesigner (x32 Version: 4.4.9.203 - Nero AG) Hidden
Nero CoverDesigner Help (x32 Version: 4.4.6.100 - Nero AG) Hidden
Nero DiscSpeed (x32 Version: 5.4.7.202 - Nero AG) Hidden
Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden
Nero DriveSpeed (x32 Version: 4.4.10.100 - Nero AG) Hidden
Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden
Nero InfoTool (x32 Version: 6.4.7.204 - Nero AG) Hidden
Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden
Nero Installer (x32 Version: 4.4.8.1 - Nero AG) Hidden
Nero StartSmart (x32 Version: 9.4.11.207 - Nero AG) Hidden
Nero StartSmart Help (x32 Version: 9.4.1.100 - Nero AG) Hidden
Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Pazera Free MP4 to AVI Converter 1.8 (HKLM-x32\...\{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1) (Version: 1.8 - Pazera Jacek)
PDF Architect (HKLM-x32\...\{09531CAE-B186-49A9-B44F-C607CC54FA2A}) (Version: 1.0.51.8724 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Sandboxie 3.76 (64-bit) (HKLM\...\Sandboxie) (Version: 3.76 - SANDBOXIE L.T.D)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2553444) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{799005D3-9B70-4219-AFE0-BC479614CC4D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
V-bates 2.0.0.438 (HKLM\...\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1) (Version: 2.0.0.438 - Wajamu) <==== ATTENTION
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

08-04-2014 08:50:46 Windows Update
10-04-2014 04:49:26 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-05-17 11:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1E317513-2DC4-4D40-A8E0-9EAE849AC03C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: {43E8A059-8009-4F52-8B91-2C8717DF3CD6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {B8E36164-724D-4848-874E-1DE2701AF14C} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {B961ACFB-A8CF-47A3-8B7E-6CA13C64DDDA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {E5E4FAA3-0FCD-4D3B-B70F-1B480A88D51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-12-25 12:29 - 2012-09-19 19:17 - 00397088 _____ () D:\Wichtige Programme\Avira\AntiVir Desktop\sqlite3.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "D:\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: WinampAgent => D:\winamp\winampa.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/08/2014 08:28:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Name des fehlerhaften Moduls: HelperService.exe, Version: 1.0.0.1, Zeitstempel: 0x50cb2eaf
Ausnahmecode: 0x40000015
Fehleroffset: 0x000a0940
ID des fehlerhaften Prozesses: 0x7b8
Startzeit der fehlerhaften Anwendung: 0xHelperService.exe0
Pfad der fehlerhaften Anwendung: HelperService.exe1
Pfad des fehlerhaften Moduls: HelperService.exe2
Berichtskennung: HelperService.exe3

Error: (04/08/2014 11:15:37 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37
Name des fehlerhaften Moduls: xul.dll, Version: 28.0.0.5186, Zeitstempel: 0x53240e04
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00184729
ID des fehlerhaften Prozesses: 0xd6c
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3


System errors:
=============
Error: (04/11/2014 06:51:18 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (04/11/2014 01:16:16 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (04/08/2014 08:28:47 PM) (Source: Service Control Manager) (User: )
Description: Dienst "PDF Architect Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/08/2014 08:23:41 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005


Microsoft Office Sessions:
=========================
Error: (04/08/2014 08:28:44 PM) (Source: Application Error)(User: )
Description: HelperService.exe1.0.0.150cb2eafHelperService.exe1.0.0.150cb2eaf40000015000a09407b801cf53579dcb123aC:\Program Files (x86)\PDF Architect\HelperService.exeC:\Program Files (x86)\PDF Architect\HelperService.exe9d8280be-bf4b-11e3-ab64-4487fc8017a4

Error: (04/08/2014 11:15:37 AM) (Source: Application Error)(User: )
Description: firefox.exe28.0.0.518653240e37xul.dll28.0.0.518653240e04c000000500184729d6c01cf530af2a0ac21C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dll585b13ce-befe-11e3-a7de-4487fc8017a4


CodeIntegrity Errors:
===================================
  Date: 2013-05-17 11:18:44.527
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-05-17 11:18:44.464
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 29%
Total physical RAM: 3959.12 MB
Available physical RAM: 2780.61 MB
Total Pagefile: 7916.41 MB
Available Pagefile: 6550.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:48.74 GB) (Free:10.14 GB) NTFS
Drive d: (Programme) (Fixed) (Total:19.64 GB) (Free:15.38 GB) NTFS
Drive e: (Bilder) (Fixed) (Total:43.95 GB) (Free:6.14 GB) NTFS
Drive f: (Musik) (Fixed) (Total:19.53 GB) (Free:10.54 GB) NTFS
Drive g: (Daten) (Fixed) (Total:17.09 GB) (Free:15.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 0007C83B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=49 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=81 GB) - (Type=OF Extended)

==================== End Of Log ============================
         
Das Problem mit dem Proxyserverzugang hat sich nicht mehr wiederholt, irgendwie werden die Einstellungen in den Browsern jetzt übernommen.
Auffällig ist nur noch, dass extrem viel Werbung in den Browsern angezeigt wird, aber keine Pop-Ups. Habe im Moment kein Adblockplugin im Browser aktiviert, weil ich mir eingebildet habe, dass es im Moment zwecks der Diagnose so besser ist.

Viele Grüße,
chris

Alt 11.04.2014, 21:03   #13
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Okay, dann bitte Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.04.2014, 20:00   #14
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Hallo lieber cosinus,

könnte mich so über mich selbst ärgern: Habe bei dem ersten Scan mit Malwarebytes aus Versehen eine ältere Version (aber mit aktualisierter Datenbank) benutzt. Die aktuelle Version hat nochmal jede Menge Mist gefunden, so dass ich den Log auf mehrere Posts aufteilen muss.

hier die Scans:
Malwarebytes:
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.04.2014
Suchlauf-Zeit: 12:59:24
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.12.02
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Christoph

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 383055
Verstrichene Zeit: 35 Min, 16 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 24
PUP.Optional.VBates, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, Löschen bei Neustart, [956b2ed201ff847cf2af5bb8a95933cd], 
PUP.Optional.VBates, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, Löschen bei Neustart, [956b2ed201ff847cf2af5bb8a95933cd], 
PUP.Optional.QuickShare.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Löschen bei Neustart, [c13f9e6217e9fd03376c40068d758080], 
PUP.Optional.QuickShare.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Löschen bei Neustart, [c13f9e6217e9fd03376c40068d758080], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Löschen bei Neustart, [9b6590700000b24ed651c44e758d24dc], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Löschen bei Neustart, [9b6590700000b24ed651c44e758d24dc], 
PUP.Optional.VbatesHelper.A, HKLM\SOFTWARE\V-bates, In Quarantäne, [ab55c13fcf311ae60c8b4335b64c8e72], 
PUP.Optional.HQVid.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [7f81d52b639d14ecccf13f27f909ce32], 
PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [000003fd36cab14f20e30465fe043bc5], 
PUP.Optional.SmartSaver.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [a060be42ec14b947358c056be81abf41], 
PUP.Optional.SmartBar, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarBackup, Löschen bei Neustart, [46bacd337987da264a72376ec93ae818], 
PUP.Optional.SmartBar, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarLog, Löschen bei Neustart, [59a7718f2bd503fda6158b1afd0652ae], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Löschen bei Neustart, [a759877953adf50bb704544d44bf6f91], 
PUP.Optional.HQVid.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [10f0d52bc73947b917a691d59a68a65a], 
PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [b050996733cd2bd57c87c1a8738ffa06], 
PUP.Optional.SmartSaver.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [cc34a45c38c80000a61b75fb8d75f709], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Löschen bei Neustart, [847c52ae837d728e2f8c1e8359aa4eb2], 
PUP.Optional.HQVid.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [f50b916ff40c8080ccf18fd7dd2530d0], 
PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [9c64e51b837d867a16ed5f0a6d95629e], 
PUP.Optional.SmartSaver.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [79878a766e925ba5942d4f21bb477090], 
PUP.Optional.BProtector.A, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\BPROTECTSETTINGS, Löschen bei Neustart, [df21d32dfd03c23ea3b9355b986bd030], 
PUP.Optional.HQVid.A, HKU\S-1-5-21-402407132-709534727-3866883504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid8, Löschen bei Neustart, [02feb0500cf4cb35714c43236d9518e8], 
PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-21-402407132-709534727-3866883504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Löschen bei Neustart, [bb4535cbca3630d07f8420492ed41ae6], 
PUP.Optional.SmartSaver.A, HKU\S-1-5-21-402407132-709534727-3866883504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 8, Löschen bei Neustart, [9967a15fc739ca36b908dd935ea42bd5], 

Registrierungswerte: 5
PUM.Bad.Proxy, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, Löschen bei Neustart, [9b6506fafa0636ca54c265415ca71fe1]
PUP.Optional.SmartBar.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Infrastructure Helper, C:\Users\Heidi und Kalle\AppData\Local\Smartbar\Application\Smartbar.exe startup, Löschen bei Neustart, [dc248a76e21ef808636de1aaee15669a]
PUP.Optional.ReMarkIT.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{5ae66703-77f8-4623-8c81-9ba769053c03}, C:\Program Files (x86)\Re-markit Corp\158.xpi, Löschen bei Neustart, [41bf9c64817f26da60cb283f659ddb25]
PUP.BProtector, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Löschen bei Neustart, [da269c64ce32fd0322df7914fe057f81]
PUM.Bad.Proxy, HKU\S-1-5-21-402407132-709534727-3866883504-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, Löschen bei Neustart, [ea16a15f768aed1353c3dcca0201d927]

Registrierungsdaten: 15
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|CustomizeSearch, hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}),Ersetzt,[fe023cc4936d04fc483b7a9ba361c53b]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1396205799&from=tugs&uid=HITACHIXHTS722016K9SA00_081117DP1D70DGGWYLVTX&q={searchTerms}),Ersetzt,[d030768a13edfc04255ff421897b1de3]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[0af6fc048b7567991757001f25dfe11f]
PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[738de21e42bef90727b7a07e41c3d729]
PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFkVzMqCcxhlHKbI0wfcSFsxayc0RIW8Y7zFg-0sOD_Tp6ICQuH-n1YauH92qdMoUNkW-Osuw,,, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFkVzMqCcxhlHKbI0wfcSFsxayc0RIW8Y7zFg-0sOD_Tp6ICQuH-n1YauH92qdMoUNkW-Osuw,,),Löschen bei Neustart,[c63a53ad857b44bcd10ee13d06fed828]
PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[966a699742be22de08d545d9e420b54b]
PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[db256c94ac54b84822be6eb011f3a25e]
PUP.Optional.Snapdo, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[33cd38c8d12fad5334ad2cf233d131cf]
PUP.Optional.SnapDo.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Löschen bei Neustart,[8f71c23e0cf409f7caac859094703ac6]
PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[a858dc24867a20e022bccb5324e0a55b]
PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8rzApXqnyHK7IFMz-FSPYaBdHkL_-lyoHHu2tTLng6w5QQM2IuJcwAxl1ttI25Vg,,),Löschen bei Neustart,[d42c15eb88788977fce3b66824e047b9]
PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[27d96799dd23e11f9d40b7679a6a5ea2]
PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[a060f10fd828c23e9e42e23c9f65de22]
PUP.Optional.Snapdo, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[936d738dc23e2ad6edf446d8aa5a0cf4]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-402407132-709534727-3866883504-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna06INwd8-VKTERjjSfvx3Wo_ismYPdWz34Gv2xvYTIQUBL7QqXtZnsyQf2R8q4M_N8nSp1FVpS8zxPY66GsrtxHff8VG7pYsz56yANoCqp_Qpry9t5D_Zu2mT5OxG2THQ,,&q={searchTerms}),Löschen bei Neustart,[936d8c7421dfe818d1a5a86d46be5fa1]

Ordner: 117
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin, In Quarantäne, [9a6636ca19e79d63ab001f4059a938c8], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin, In Quarantäne, [c23e1ee2e31da25ebdeec49b778bef11], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 
PUP.Optional.CrossRider.A, C:\Users\Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\vsl49w34.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, In Quarantäne, [07f95ba523dd966a9516035c649eb24e], 

Dateien: 926
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome.manifest, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\install.rdf, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\background.html, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\baseObject.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\browser.xul, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\dialog.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\main.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.xul, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\platformVersion.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\search_dialog.xul, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\asyncDB.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\background.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\browserAction.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\contextMenu.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dbManager.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dom_bg.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\fileManager.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefox.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\message.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\pageAction.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\request.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\tabs.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\webRequest.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\console.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\consts.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\delegate.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\httpObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\installer.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\logFile.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\prefs.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\registry.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reloadObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reports.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\requestObject.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\searchSettings.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\updateManager.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\utils.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\xhr.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences\prefs.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\manifest.xml, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins.json, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\1.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\102.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\104.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\13.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\14.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\16.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\17.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\177.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\180.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\182.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\183.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\191.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\193.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\207.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\21.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\211.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\22.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\223.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\246.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\28.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\4.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\47.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\64.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\72.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\78.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\91.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\93.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\98.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\background.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\extension.js, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US\translations.dtd, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button1.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button2.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button3.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button4.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button5.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\crossrider_statusbar.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon128.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon16.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon24.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon48.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\panelarrow-up.png, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\popup.html, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\skin.css, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\update.css, In Quarantäne, [54acb848c93735cb6c3fb7a8ca383dc3], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome.manifest, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\install.rdf, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\background.html, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\baseObject.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\browser.xul, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\dialog.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\main.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.xul, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\platformVersion.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\search_dialog.xul, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\asyncDB.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\background.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\browserAction.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\contextMenu.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dbManager.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dom_bg.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\fileManager.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefox.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\message.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\pageAction.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\request.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\tabs.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\webRequest.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\console.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\consts.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\delegate.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\httpObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\installer.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\logFile.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\prefs.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\registry.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reloadObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reports.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\requestObject.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\searchSettings.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\updateManager.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\utils.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\xhr.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences\prefs.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\manifest.xml, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins.json, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\1.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\102.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\103.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\104.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\13.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\14.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\155.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\16.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\17.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\177.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\182.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\183.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\184.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\190.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\191.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\195.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\207.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\21.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\211.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\22.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\220.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050],
         

Alt 12.04.2014, 20:01   #15
chris0806
 
u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Standard

u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional



Code:
ATTFilter
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\233.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\242.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\246.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\28.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\4.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\47.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\64.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\7.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\72.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\78.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\9.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\91.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\93.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\98.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\background.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\extension.js, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US\translations.dtd, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button1.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button2.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button3.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button4.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button5.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\crossrider_statusbar.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon128.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon16.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon24.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon48.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\panelarrow-up.png, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\popup.html, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\skin.css, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\update.css, In Quarantäne, [7987c33d48b8ed135d4e38279c66b050], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome.manifest, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\install.rdf, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\background.html, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\baseObject.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\browser.xul, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\dialog.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\main.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.xul, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\platformVersion.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\search_dialog.xul, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\asyncDB.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\background.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\browserAction.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\contextMenu.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dbManager.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dom_bg.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\fileManager.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefox.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\message.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\pageAction.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\request.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\tabs.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\webRequest.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\console.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\consts.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\delegate.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\httpObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\installer.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\logFile.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\prefs.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\registry.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reloadObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reports.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\requestObject.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\searchSettings.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\updateManager.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\utils.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\xhr.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences\prefs.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\manifest.xml, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins.json, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\1.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\102.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\103.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\104.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\119.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\13.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\14.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\16.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\17.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\177.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\179.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\180.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\182.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\183.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\191.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\207.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\21.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\22.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\223.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\231.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\232.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\242.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\246.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\28.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\4.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\47.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\64.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\72.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\78.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\91.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\93.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\98.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode\background.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode\extension.js, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US\translations.dtd, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button1.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button2.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button3.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button4.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button5.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\crossrider_statusbar.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon128.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon16.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon24.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon48.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\panelarrow-up.png, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\popup.html, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\skin.css, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi und Kalle\AppData\Roaming\Mozilla\Firefox\Profiles\r0b7vaco.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\update.css, In Quarantäne, [30d0fb05a759709006a5b9a69f63c13f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome.manifest, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\install.rdf, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\background.html, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\baseObject.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\browser.xul, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\dialog.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\main.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\options.xul, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\platformVersion.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\search_dialog.xul, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\asyncDB.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\background.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\browserAction.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\contextMenu.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dbManager.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\dom_bg.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\fileManager.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefox.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\message.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\pageAction.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\request.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\tabs.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\webRequest.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\console.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\consts.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\delegate.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\httpObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\installer.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\logFile.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\prefs.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\registry.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reloadObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\reports.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\requestObject.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\searchSettings.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\updateManager.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\utils.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\chrome\content\core\xhr.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\defaults\preferences\prefs.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\manifest.xml, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins.json, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\1.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\102.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\104.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\13.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\14.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\16.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\17.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\177.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\180.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\182.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\183.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\191.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\193.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\207.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\21.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\211.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\22.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\223.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\246.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\28.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\4.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\47.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\64.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\72.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\78.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\91.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\93.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\plugins\98.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\background.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\extensionData\userCode\extension.js, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\locale\en-US\translations.dtd, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button1.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button2.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button3.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button4.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\button5.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\crossrider_statusbar.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon128.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon16.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon24.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\icon48.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\panelarrow-up.png, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\popup.html, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\skin.css, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\16eede48-12e9-4c79-bd54-c82622138533@630d8a34-73af-4e03-9664-9082492eb220.com\skin\update.css, In Quarantäne, [1ae640c0d32ddb25fcafcc9330d248b8], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome.manifest, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\install.rdf, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\background.html, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\baseObject.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\browser.xul, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\dialog.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\main.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\options.xul, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\platformVersion.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\search_dialog.xul, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\asyncDB.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\background.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\browserAction.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\contextMenu.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dbManager.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\dom_bg.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\fileManager.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefox.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\message.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\pageAction.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\request.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\tabs.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\webRequest.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\console.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\consts.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\delegate.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\httpObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\installer.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\logFile.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\prefs.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\registry.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reloadObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\reports.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\requestObject.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\searchSettings.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\updateManager.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\utils.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content\core\xhr.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults\preferences\prefs.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\manifest.xml, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins.json, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\1.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\102.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\103.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\104.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\13.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\14.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\155.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\16.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\17.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\177.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\182.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\183.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\184.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\190.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\191.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\195.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\207.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\21.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\211.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\22.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\220.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\233.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\242.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\246.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\28.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\4.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\47.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\64.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\7.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\72.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\78.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\9.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\91.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\93.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\98.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\background.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\extension.js, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale\en-US\translations.dtd, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button1.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button2.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button3.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button4.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\button5.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\crossrider_statusbar.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon128.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon16.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon24.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\icon48.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\panelarrow-up.png, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\popup.html, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\skin.css, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\skin\update.css, In Quarantäne, [5da36d93639d24dc6645b0af29d97a86], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome.manifest, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\install.rdf, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\background.html, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\baseObject.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\browser.xul, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\dialog.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\main.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.xul, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\platformVersion.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\search_dialog.xul, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\asyncDB.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\background.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\browserAction.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\contextMenu.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dbManager.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dom_bg.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\fileManager.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefox.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxNotifications.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxOmnibox.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\message.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\pageAction.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\request.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\tabs.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\webRequest.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\windowsMessagingHandler.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\addressBarChangeObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\console.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\consts.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\delegate.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\extensionDataStore.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\folderIOWrapper.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\httpObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\IDBWrapper.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\installer.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\logFile.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\prefs.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\progressListenerObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\registry.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reloadObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reports.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\requestObject.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\searchSettings.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\uninstallObserver.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\updateManager.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\utils.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\xhr.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences\prefs.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\manifest.xml, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins.json, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\1.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\102.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f], 
PUP.Optional.CrossRider.A, C:\Users\Heidi\AppData\Roaming\Mozilla\Firefox\Profiles\hxqnzf3p.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\103.js, In Quarantäne, [f50b7e82788889774f5ca8b7a161f10f],
         

Antwort

Themen zu u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional
backdoor.bot, branding, hdd0(c:, newtab, pum.bad.proxy, pup.optional.adlyrics.a, pup.optional.bundleinstaller.a, pup.optional.conduit.a, pup.optional.crossrider.a, pup.optional.hqvid.a, pup.optional.iepluginservice.a, pup.optional.linkury.a, pup.optional.mediaplayerplus.a, pup.optional.quickshare.a, pup.optional.quickstart.a, pup.optional.remarkit.a, pup.optional.shoppinghelper.a, pup.optional.silenceinstall, pup.optional.skytech.a, pup.optional.smartsaver.a, pup.optional.snapdo.a, pup.optional.suptab.a, pup.optional.vbates, pup.optional.vbateshelper.a, pup.optional.videodownloader.a, pup.optional.webssearches.a, pup.optional.wpmanager, pup.optional.wpmanager.a, shopping helper smartbar, vcredist



Ähnliche Themen: u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional


  1. GMER stürzt ab - MBAM erkennt PUP.Optional.Agent, PUP.Optional.IEBho.A, PUP.Optional.MyFreeze.A
    Plagegeister aller Art und deren Bekämpfung - 07.02.2015 (13)
  2. WIN7: Fund PUP.Optional.DigitalSites.A, PUP.Optional.OpenCandy, PUP.Optional.Softonic.A, PUP.Optional.Updater.A. Weitere Vorgehensweise
    Log-Analyse und Auswertung - 08.10.2014 (11)
  3. Trojaner: PUP.Optional.CrossRider.A, PUP.Optional.MySearchDial.A, PUP.Optional.Babylon.A, PUP.Optional.BuenoSearch
    Plagegeister aller Art und deren Bekämpfung - 17.07.2014 (3)
  4. Werbung im Browser; Unterstrichene Wörter mit Werbung; Taskleiste zeigt kurz ein Symbol
    Plagegeister aller Art und deren Bekämpfung - 17.03.2014 (4)
  5. Tastatur funktioniert nicht mehr - APPL/Somoto.Gen2 & APPL/Downloader.Gen
    Plagegeister aller Art und deren Bekämpfung - 24.12.2013 (11)
  6. Win 7, Trojan.Agent/Gen-Eldorado, PUP.Optional.InstallCore.A und PUP.Optional.Lyrics.A
    Plagegeister aller Art und deren Bekämpfung - 23.12.2013 (3)
  7. Win 7, Trojan.Agent/Gen-Eldorado, PUP.Optional.InstallCore.A und PUP.Optional.Lyrics.A
    Mülltonne - 22.12.2013 (0)
  8. Virus: APPL/DomaIQ.gen7
    Plagegeister aller Art und deren Bekämpfung - 17.11.2013 (12)
  9. Windows 7: Avira findet Trojaner TR/MSIL.Agent.cfgz und ADWARE/DomaIQ.AD
    Log-Analyse und Auswertung - 08.11.2013 (11)
  10. PC läuft langsam Adware Agent,Pup Optional B..,Pup Optional S..,wurde von Malewarebytes gefunden
    Log-Analyse und Auswertung - 04.10.2013 (41)
  11. PUP Optional. Browser Defender A und PUP Optional. Babylon A von Malwarebytes gelöscht?
    Log-Analyse und Auswertung - 28.08.2013 (14)
  12. Virenfund: APPL/DomaIQ.gen --- Beheben oder Neuinstallation praktischer?
    Log-Analyse und Auswertung - 17.06.2013 (23)
  13. Avira meldet APPL/DomaIQ.Gen in C:\Users\Alex\AppData\Local\Temp\5sumi_bh.exe.part
    Plagegeister aller Art und deren Bekämpfung - 15.05.2013 (23)
  14. 2x Avira meldet APPL/DomaIQ.Gen in C:\Users\Alex\AppData\Local\Temp\5sumi_bh.exe.part
    Mülltonne - 09.05.2013 (1)
  15. Trojaner trotz Norton und Ad-Aware/Werbung für Google Casino
    Plagegeister aller Art und deren Bekämpfung - 13.05.2009 (7)
  16. Keine Updates, kann kein Ad-aware oder Spybot installieren, Browser funktioniert kaum
    Log-Analyse und Auswertung - 16.02.2009 (8)
  17. Win32.Trojan.Agent.cs von Ad-Aware gefunden. Wie entfernen?
    Plagegeister aller Art und deren Bekämpfung - 15.07.2005 (3)

Zum Thema u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional - Hallo liebe Helfer vom Trojanerboard, auf unserem PC hat sich vor wenigen Tagen wahrscheinlich mehrere Adwares und/oder Trojaner eingenistet, die ich nun mit eurer netten Hilfe beseitigen möchte. Symptome: Nervige - u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional...
Archiv
Du betrachtest: u.a. AWARE/Agent.71168, APPL/DomaIQ.Gen, Werbung im Browser, PUP.Optional auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.