Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 26.05.2014
Scan Time: 14:34:14
Logfile: LOG.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.05.26.01
Rootkit Database: v2014.05.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Alexander Köhn

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 461489
Time Elapsed: 23 min, 20 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 32
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [c5346ce90e6da294963341efe31fff01],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}, , [c5346ce90e6da294963341efe31fff01],
PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [48b1a4b157247eb8526a8cd7fa08ce32],
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [48b1a4b157247eb8526a8cd7fa08ce32],
PUP.Optional.HomePageProtector.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [fdfcbd98fb80c571b5c750ddb44e9769],
PUP.Optional.HomePageProtector.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [fdfcbd98fb80c571b5c750ddb44e9769],
PUP.Optional.HomePageProtector.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [fdfcbd98fb80c571b5c750ddb44e9769],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [21d8f95c770457df40c2ce96fa08847c],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [a0590b4a15663501de252c38fc06649c],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr, , [b148a4b13d3eb87e7a70a5c0a959f10f],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr.1, , [50a9f2633d3eb680a248362f9270c739],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr, , [50a9f2633d3eb680a248362f9270c739],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr.1, , [50a9f2633d3eb680a248362f9270c739],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\CLASSES\APPID\PriceGongIE.DLL, , [c33672e30d6e7abca1a5b7f2719137c9],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [0ced1d38f883b383397e2073e51de51b],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [c831a6afd0ab57dfabf40b9c56ace020],
PUP.Optional.PriceGong.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PriceGongIE.DLL, , [5b9e3d18fa81d16599add1d85ba722de],
PUP.Optional.Yontoo.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\niapdbllcanepiiimjjndipklodoedlc, , [47b25ef7cbb0c6708047404e5ea405fb],
PUP.Optional.BundleInstaller.A, HKLM\SOFTWARE\WOW6432NODE\VITTALIA\AxtanInstaller, , [9a5fb79e17640d29d85903a18e74e719],
PUP.Optional.BabylonToolBar.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BabylonToolbar, , [5a9f0d48007b56e087e001bfde258d73],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, , [31c81045f4876cca4f42299323e0ce32],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [a950460f7efd290d028eb00c36cdb44c],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [ae4b0550bfbc2c0a66a9b7eafd05fa06],
PUP.Optional.Babylon.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BABSOLUTION\Updater, , [56a382d3a7d4082eb1e65c61a16236ca],
PUP.Optional.Conduit.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [9465b79e9be0290d56e37052b0530000],
PUP.Optional.Softonic.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [b14822338fec1d1981c10c892bd7f60a],
PUP.Optional.Iminent.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, , [c336abaa2c4fc76f425e1a8d1be7639d],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [6c8d73e2502bfd393cd33a67828049b7],
PUP.Optional.Incredibar.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INCREDIBAR.COM\incredibar, , [02f7074e512a8bab785febaa7f8317e9],
PUP.Optional.Iminent, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}, , [8a6fd382f58631055534567c798a817f],
PUP.Optional.Softonic.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [5f9a2134f487db5bfc46deb70cf68b75],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-3395596779-1063543225-171022050-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [fbfebe977cff45f19a756e3314eeb749],

Registry Values: 4
PUP.Optional.HomePageProtector.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\Web Assistant\Firefox, , [fdfcbd98fb80c571b5c750ddb44e9769]
PUP.Optional.HomePageProtector.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\Web Assistant\Firefox, , [fdfcbd98fb80c571b5c750ddb44e9769]
PUP.Optional.HomePageProtector.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [4eab0550fe7da3936418fe2ff2103cc4],
PUP.Optional.HomePageProtector.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [0fea1e37fb8087af710bea4380824ab6],

Registry Data: 0
(No malicious items detected)

Folders: 28
PUP.Optional.Iminent.A, C:\Users\Monika Köhn\AppData\Roaming\Iminent\Mediator, , [4dace5703c3fac8a1c68482e43bf5fa1],
PUP.Optional.Iminent.A, C:\Users\Monika Köhn\AppData\Roaming\Iminent\Mediator\Datas, , [4dace5703c3fac8a1c68482e43bf5fa1],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\63EA737ADD4A4D829C6BB56B0527104D, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\98D158B8DC40499C9F44E1CBC714831E, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\A217A4CDF9154A72B65E7B5B3639896C, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\E4A2D42015394264B0571170255DABF8, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.Iminent.A, C:\Users\Alexander Köhn\AppData\Local\Temp\Iminent, , [ea0f9fb6df9c211505cd3046fa080df3],
PUP.Optional.Iminent.A, C:\Users\Alexander Köhn\AppData\Local\Temp\Iminent\Log, , [ea0f9fb6df9c211505cd3046fa080df3],
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Delta, , [f603b99c8bf03600c80e294dc240ec14],
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Delta\delta, , [f603b99c8bf03600c80e294dc240ec14],
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.10.0, , [f603b99c8bf03600c80e294dc240ec14],
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.21.5, , [f603b99c8bf03600c80e294dc240ec14],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\chrome, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\META-INF, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\searchplugin, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\CT2682599, , [758465f0205bcb6b64cc631429d9ec14],
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong, , [659413429fdcac8ad147e39851b14db3],
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.5.1, , [659413429fdcac8ad147e39851b14db3],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong, , [1ddc74e1e09bc27494e8ed90c33fac54],
PUP.Optional.Incredibar.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Incredibar.com, , [49b060f593e86ec800ddb0cfc83a26da],
PUP.Optional.Incredibar.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Incredibar.com\incredibar, , [49b060f593e86ec800ddb0cfc83a26da],
PUP.Optional.Incredibar.A, C:\Users\Alexander Köhn\AppData\Local\Temp\mt_ffx\Incredibar.com\incredibar\1.5.11.14, , [49b060f593e86ec800ddb0cfc83a26da],
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo Layers, , [59a0d77e7dfe93a3a132790d6d9507f9],

Files: 117
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\63EA737ADD4A4D829C6BB56B0527104D\DeltaTB.exe, , [a554f461225992a49965dd2ac1407d83],
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\E4A2D42015394264B0571170255DABF8\DeltaTB.exe, , [b445d48143383303b74750b76d94718f],
PUP.Tool, C:\Windows\SysWOW64\cmdow.exe, , [1bde8bcafb806acc77ed526653ae4ab6],
PUP.Optional.Somoto.A, C:\Users\Alexander Köhn\AppData\Local\Temp\nskF616.tmp, , [40b9fd5825563204fa739a7e70910000],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe, , [609971e48eeded49ad1d12699a6ad42c],
Malware.Packer.FFS, C:\Users\Alexander Köhn\AppData\Local\Temp\jpUFgAIy.zip.part, , [d02974e1f6853105332959d916eb6c94],
PUP.Optional.Vittalia, C:\Users\Alexander Köhn\AppData\Local\Temp\instloffer.exe, , [0dec57fe8fec14228cab1b700df4956b],
PUP.Optional.OptimizePro.A, C:\Users\Alexander Köhn\AppData\Local\Temp\OptimizerPro.exe, , [4eab87ce42395fd763d063bb35cb39c7],
Adware.Yontoo, C:\Users\Alexander Köhn\AppData\Local\Temp\YontooIEClient.dll, , [db1e7adbc6b52a0cfc84ff0bf30de11f],
Trojan.RotBrow.A, C:\Users\Alexander Köhn\AppData\Local\Temp\che3C06.tmp, , [25d41045ef8c9f97f1e9c4b68f7252ae],
PUP.Optional.Babylon.A, C:\Users\Alexander Köhn\AppData\Local\Temp\081E03EB-BAB0-7891-A167-6A3C94D9919F\Latest\BExternal.dll, , [3fbaa0b59fdc082ec91af52db05021df],
Trojan.RotBrowse, C:\Users\Alexander Köhn\AppData\Local\Temp\081E03EB-BAB0-7891-A167-6A3C94D9919F\Latest\ccp.exe, , [20d986cfdd9e3bfb5835c88254b007f9],
PUP.Optional.Babylon.A, C:\Users\Alexander Köhn\AppData\Local\Temp\081E03EB-BAB0-7891-A167-6A3C94D9919F\Latest\CrxInstaller.dll, , [c3361f368cef0135268973a66d9431cf],
PUP.Optional.Delta.A, C:\Users\Alexander Köhn\AppData\Local\Temp\081E03EB-BAB0-7891-A167-6A3C94D9919F\Latest\MyBabylonTB.exe, , [45b41f36087382b4354d2d43af526b95],
PUP.Optional.Babylon.A, C:\Users\Alexander Köhn\AppData\Local\Temp\081E03EB-BAB0-7891-A167-6A3C94D9919F\Latest\Setup.exe, , [fdfc3c19e695a98d5f9bcb40d52cd729],
PUP.Optional.FaceMoods.A, C:\Users\Alexander Köhn\AppData\Local\Temp\is233770471\facemoods.exe, , [a950d085502b122466df334f83819d63],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus6D3\CrxUpdater_d.exe, , [21d8fd58641774c2cd2abd63976d6c94],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus780C\CrxUpdater_d.exe, , [dc1d0253ec8f82b42bcc140cc044e818],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus91E2\CrxUpdater_d.exe, , [54a5d580b1ca4ee813e4839d8c782ad6],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus9368\CrxUpdater_d.exe, , [ad4c5afbcfac9b9b9b5c2000d62eab55],
Trojan.RotBrowse, C:\Users\Alexander Köhn\AppData\Local\Temp\6EDC727B-BAB0-7891-8E9C-7BA85BC10BDA\Latest\ccp.exe, , [0fea1d383447e94d127b1b2ffb0913ed],
PUP.Optional.Babylon.A, C:\Users\Alexander Köhn\AppData\Local\Temp\6EDC727B-BAB0-7891-8E9C-7BA85BC10BDA\Latest\CrxInstaller.dum, , [ed0c74e190ebac8a2887f82128d9cc34],
PUP.Optional.Delta, C:\Users\Alexander Köhn\AppData\Local\Temp\6EDC727B-BAB0-7891-8E9C-7BA85BC10BDA\Latest\MyDeltaTB.exe, , [6099cb8a3d3e999d6c3031d817ea9868],
PUP.Optional.Babylon.A, C:\Users\Alexander Köhn\AppData\Local\Temp\6EDC727B-BAB0-7891-8E9C-7BA85BC10BDA\Latest\Setup.exe, , [9f5af85d2556e254d1611707f30d39c7],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busAD9C\CrxUpdater_d.exe, , [33c6e76eb9c21125da1de23eb3517987],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busAEC5\CrxUpdater_d.exe, , [3ebb045180fbb87e8e6969b7f80c0df3],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busB23E\CrxUpdater_d.exe, , [a554480d46352d09e116829e966e29d7],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busB74D\CrxUpdater_d.exe, , [8d6c1d38c6b5360032c52df360a4c838],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busBC2D\CrxUpdater_d.exe, , [cd2c93c25b2051e5a75009171de7cd33],
PUP.Optional.BabSolution.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busBD26\BUSolution.dll, , [04f54213a4d7a294bc3fc646d62b758b],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busC4A5\CrxUpdater_d.exe, , [8475de77e6951f171fd83ee2d82c03fd],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus973F\CrxUpdater_d.exe, , [1edb4114374495a1e512f22e5ea608f8],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus9A99\CrxUpdater_d.exe, , [f0090b4a205b8caa7f78ad7322e21ae6],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus9B93\CrxUpdater_d.exe, , [40b9361fd5a6ad8957a032ee43c1e61a],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus9E03\CrxUpdater_d.exe, , [f30699bc106bbf7749aecb55db296997],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\bus9E51\CrxUpdater_d.exe, , [f6039cb98fec37ffcb2c5fc1b54ff907],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busA025\CrxUpdater_d.exe, , [15e42332e19a053107f021ff5ba9cc34],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busA469\CrxUpdater_d.exe, , [8c6d9abb2b504fe7d91e1f01ae565da3],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busA736\CrxUpdater_d.exe, , [a356ea6b17643bfb2fc869b741c351af],
PUP.Optional.CRX.A, C:\Users\Alexander Köhn\AppData\Local\Temp\busA90A\CrxUpdater_d.exe, , [92672134f48711257780120e798bdd23],
Trojan.Agent.CK, C:\Users\Alexander Köhn\Downloads\xf-adsk64.7z, , [71883223ea91102695fbf8288b77ef11],
Adware.Linkular, C:\Users\Alexander Köhn\AppData\Local\DownloadGuide\Offers\Lollipop.exe, , [eb0e77de4c2f95a1d2bd4637db2905fb],
PUP.Optional.BProtector.A, C:\Users\Alexander Köhn\AppData\Roaming\Mozilla\Firefox\Profiles\5hnuazp5.default\bProtector_extensions.sqlite, , [b44534211665e0563575594256ac8f71],
PUP.Optional.BProtector.A, C:\Users\Alexander Köhn\AppData\Roaming\Mozilla\Firefox\Profiles\83ukwqst.default-1365006940133\bProtector_extensions.sqlite, , [88712d280c6f30063179bae1649ee818],
PUP.Optional.BProtector.A, C:\Users\Alexander Köhn\AppData\Roaming\Mozilla\Firefox\Profiles\r1h21jwe.default-1365005557058\bProtector_extensions.sqlite, , [f306ef66ccaf44f24d5d316a11f18b75],
PUP.Optional.BProtector.A, C:\Users\Monika Köhn\AppData\Roaming\Mozilla\Firefox\Profiles\h6zsoedp.default\bprotector_extensions.sqlite, , [f80189cc2754a88e7c2ef5a6e61c41bf],
PUP.Optional.BProtector.A, C:\Users\Monika Köhn\AppData\Roaming\Mozilla\Firefox\Profiles\h6zsoedp.default\bprotector_prefs.js, , [92675203d1aab87ee1ca4853a45eaa56],
PUP.Optional.Iminent.A, C:\Users\Monika Köhn\AppData\Roaming\Iminent\Mediator\Datas\globalcache.dat, , [4dace5703c3fac8a1c68482e43bf5fa1],
PUP.Optional.Iminent.A, C:\Users\Monika Köhn\AppData\Roaming\Iminent\Mediator\Datas\user.dat, , [4dace5703c3fac8a1c68482e43bf5fa1],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\63EA737ADD4A4D829C6BB56B0527104D\5472.ico, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\63EA737ADD4A4D829C6BB56B0527104D\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\63EA737ADD4A4D829C6BB56B0527104D\OCBrowserHelper_1.0.6.125.exe, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\98D158B8DC40499C9F44E1CBC714831E\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\A217A4CDF9154A72B65E7B5B3639896C\2877.ico, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\A217A4CDF9154A72B65E7B5B3639896C\AVG Toolbar Installer.exe, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\A217A4CDF9154A72B65E7B5B3639896C\AVG_Toolbar_CB_ALL_p2v0.exe, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\A217A4CDF9154A72B65E7B5B3639896C\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\A217A4CDF9154A72B65E7B5B3639896C\OCBrowserHelper_1.0.3.85.dll, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\E4A2D42015394264B0571170255DABF8\5472.ico, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\E4A2D42015394264B0571170255DABF8\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.OpenCandy, C:\Users\Alexander Köhn\AppData\Roaming\OpenCandy\E4A2D42015394264B0571170255DABF8\OCBrowserHelper_1.0.5.112.dll, , [966314415c1f37ffd9e0ee883bc77b85],
PUP.Optional.Iminent.A, C:\Users\Alexander Köhn\AppData\Local\Temp\Iminent\IMinentToolbarInstallerFF.exe, , [ea0f9fb6df9c211505cd3046fa080df3],
PUP.Optional.Iminent.A, C:\Users\Alexander Köhn\AppData\Local\Temp\Iminent\Log\Iminent.MSI.log, , [ea0f9fb6df9c211505cd3046fa080df3],
PUP.Optional.Iminent.A, C:\Users\Alexander Köhn\AppData\Local\Temp\Iminent\Log\IMinentToolbar.msi.log, , [ea0f9fb6df9c211505cd3046fa080df3],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\chrome.manifest, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\install.rdf, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\version.txt, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\chrome\dvdvideosofttb.jar, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components\ConduitAutoCompleteSearch.js, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components\ConduitAutoCompleteSearch.xpt, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components\RadioWMPCore.xpt, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components\RadioWMPCoreGecko19.dll, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components\RadioWMPCoreGecko5.dll, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\components\RadioWMPCoreGecko6.dll, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\alertSettingsComponent.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\appContextMenu.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\engineContextMenu.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\engineSettings.json, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\fbAlert.js, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\getAppsContextMenu.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\postAppsContextMenu.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\toolbarContextMenu.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\defaults\unsharedAppsContextMenu.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\META-INF\manifest.mf, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\META-INF\zigbert.rsa, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\META-INF\zigbert.sf, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Chat.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\DataStructures.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\EBEncryption.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\ExternalLibraryLoader.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\HTTP.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\IO.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Log.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\MainSingleton.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\MD5.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Notifications.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\ObserversAndEvents.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Prefs.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\SearchProtector.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\SearchSuggestIO.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\String.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\TEAEncryption.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Timer.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Twitter.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\URL.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\Windows.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\modules\XML.jsm, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\ct2269050\searchplugin\conduit.xml, , [34c562f3413aed499c942b4ca161be42],
PUP.Optional.Conduit.A, C:\Users\Alexander Köhn\AppData\Local\Temp\CT2682599\ddt.csf, , [758465f0205bcb6b64cc631429d9ec14],
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\uninst.exe, , [659413429fdcac8ad147e39851b14db3],
PUP.Optional.PriceGong.A, C:\Program Files (x86)\PriceGong\2.5.1\PriceGong.crx, , [659413429fdcac8ad147e39851b14db3],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Contact Us.lnk, , [1ddc74e1e09bc27494e8ed90c33fac54],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Help.lnk, , [1ddc74e1e09bc27494e8ed90c33fac54],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\PriceGong Homepage.lnk, , [1ddc74e1e09bc27494e8ed90c33fac54],
PUP.Optional.PriceGong.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\Uninstall PriceGong.lnk, , [1ddc74e1e09bc27494e8ed90c33fac54],
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo Layers\YontooIEClient.dll, , [59a0d77e7dfe93a3a132790d6d9507f9],
PUP.Optional.Delta.A, C:\Users\Monika Köhn\AppData\Roaming\Mozilla\Firefox\Profiles\h6zsoedp.default\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?babsrc=NT_ss&mntrId=76F76C626D981801&affID=121562&tl=gbn192982&tsp=4924"), ,[b247074ec7b4cf6755aaed97b84c6a96]

Physical Sectors: 0
(No malicious items detected)


(end)

Ein Strang reicht! => http://www.trojaner-board.de/154371-...-visual-c.html