Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 8 & Windows 7 Laptop beide stark Adware verseucht

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 13.07.2015, 16:56   #16
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Mach gleich den nächsten. Ich würde dann einfach auf Win10 warten
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 14.07.2015, 02:03   #17
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



So dann kommt hier mal der Win7-Laptop,

Malwarebytes:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 07.07.2015
Suchlaufzeit: 19:45
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.07.07.04
Rootkit-Datenbank: v2015.07.07.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Lucas

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 430761
Abgelaufene Zeit: 56 Min., 35 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 39
PUP.Optional.XTab.A, C:\Program Files (x86)\MiuiTab\PROTECTSERVICE.EXE, 3176, Löschen bei Neustart, [ba36d80602886dc9b9abb06a47bb5fa1]
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe, 3236, Löschen bei Neustart, [747cd20c5d2d152124a43b5839cd7f81]
Trojan.Downloader, C:\Windows\mutk.exe, 3492, Löschen bei Neustart, [a24e29b53753ff37de380d68ee14e31d]
Trojan.Agent.SV, C:\Users\Lucas\AppData\Local\Temp\svhost.exe, 4320, Löschen bei Neustart, [13ddd70774161d19c14efa4b18ee40c0]
Trojan.Downloader, C:\Windows\utk.exe, 4388, Löschen bei Neustart, [ef01924caddd26105a7db1b38f73ef11]
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe, 4468, Löschen bei Neustart, [dc14f7e77d0d69cd8b0c5d12aa58867a]
Trojan.Agent, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\jnsi9809.tmp, 4512, Löschen bei Neustart, [7c748d51b2d8e84e2e1887e5f70bf907]
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\XPVRBXQVYB.EXE, 4552, Löschen bei Neustart, [569a9e40ec9e132368f85d37848245bb]
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\FBACDDE1-8F46-49A2-8876-7A4FFF393429-1-6.EXE, 6364, Löschen bei Neustart, [648c904e5a30bd79e61ab1da7d890ef2]
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-1-6.EXE, 6504, Löschen bei Neustart, [717f37a78505e056d8d2360ca45e50b0]
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\TOMORROWGAMES.EXE, 6664, Löschen bei Neustart, [22ce35a92d5d43f37bfe620f0cf615eb]
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\TOMORROWGAMES.EXE, 6700, Löschen bei Neustart, [22ce35a92d5d43f37bfe620f0cf615eb]
PUP.Optional.BrowserApps.A, C:\Program Files (x86)\BrowserV30.06\2635401B-3CFB-46D5-ABD5-09A74377D129-1-6.EXE, 7140, Löschen bei Neustart, [ae422ab4d5b542f42ea2e9a901056a96]
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\D7727C01-A306-43E7-8235-EA0E40118144-1-6.EXE, 6580, Löschen bei Neustart, [3eb20bd357330c2a71901013f40ed927]
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\UPGMSD_DE_005010014.EXE, 3500, Löschen bei Neustart, [11dfb925f793280e13db237060a645bb]
PUP.Optional.PullUpdate.A, C:\ProgramData\DesktopSearch\DESKTOPSEARCH.EXE, 632, Löschen bei Neustart, [9759558957332b0b4719bed63ec842be]
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\CROSSBROWSE.EXE, 7236, Löschen bei Neustart, [9c5489552c5e57df40c4147f61a5df21]
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\CROSSBROWSE.EXE, 8004, Löschen bei Neustart, [9c5489552c5e57df40c4147f61a5df21]
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\CROSSBROWSE.EXE, 5288, Löschen bei Neustart, [9c5489552c5e57df40c4147f61a5df21]
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\SMARTWEBHELPER.EXE, 7192, Löschen bei Neustart, [668ab32b1c6ed066ecc149bfbf43aa56]
PUP.Optional.Downloader.A, C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}\Download.exe, 8288, Löschen bei Neustart, [c22e0ed0b1d9eb4b552c7fcca45ebd43]
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\SMARTWEBAPP.EXE, 8324, Löschen bei Neustart, [e20e647a4c3e5bdbb4f9fd0b00028a76]
PUP.Optional.EORezo, C:\Users\Lucas\AppData\Local\gmsd_de_005010024\UPGMSD_DE_005010024.EXE, 8344, Löschen bei Neustart, [8b658d51a2e87fb7af4ff3a07d89cd33]
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010024\GMSD_DE_005010024.EXE, 9740, Löschen bei Neustart, [d21e97476822d36339c59102f511e21e]
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-10.EXE, 14836, Löschen bei Neustart, [9d53d30b0189e650d6d4ab973ec456aa]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\jsdrv.exe, 8120, Löschen bei Neustart, [01ef706eb8d25fd767fed5541fe501ff]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\jnsyE35B.tmp, 2484, Löschen bei Neustart, [a64a87570f7b67cf2b150d86d233c63a]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\knszDDD4.tmp, 3536, Löschen bei Neustart, [a64a87570f7b67cf2b150d86d233c63a]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\hnsiEA4F.tmp, 4632, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\jnsi9809.tmp, 4512, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\knsj93A4.tmp, 3652, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\hnsn2166.tmp, 4408, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\jnsnF44C.tmp, 4656, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a]
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\KNSSD725.TMPFS, 2712, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a]
PUP.Optional.3DBubbleSound.A, C:\Program Files\BubbleSound\3D BUBBLESOUND.EXE, 6808, Löschen bei Neustart, [1ad601dd276383b3c3c9837d0bf9d828]
PUP.Optional.Goobzo.A, C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe, 3788, Löschen bei Neustart, [04ecf2ec6f1b63d3794c2773d72e6898]
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiu.exe, 3872, Löschen bei Neustart, [46aac915f199fa3c08b30fd5de25a759]
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\CmdShell.exe, 6588, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e]
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\HPNotify.exe, 2760, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e]

Module: 24
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\CHROME_ELF.DLL, Löschen bei Neustart, [569a9a44800a8fa7857f237025e14db3], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\CHROME_ELF.DLL, Löschen bei Neustart, [569a9a44800a8fa7857f237025e14db3], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\CHROME_ELF.DLL, Löschen bei Neustart, [569a9a44800a8fa7857f237025e14db3], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\swhk.dll, Löschen bei Neustart, [5997efefd0ba3ef8a5088880aa586c94], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\swhk.dll, Löschen bei Neustart, [5997efefd0ba3ef8a5088880aa586c94], 
PUP.Optional.SearchProtect, C:\Program Files (x86)\MiuiTab\BROWSERACTION.DLL, Löschen bei Neustart, [49a7d20c26640a2c232fec5ed52de51b], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smci32.dll, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smci32.dll, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smci32.dll, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\CHROME_CHILD.DLL, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\CHROME_CHILD.DLL, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\D3DCOMPILER_46.DLL, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\FFMPEGSUMO.DLL, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\LIBGLESV2.DLL, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\pdf.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\IEWATCHDOG.DLL, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcp110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcp110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcp110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcr110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcr110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcr110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 

Registrierungsschlüssel: 385
PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, In Quarantäne, [ba36d80602886dc9b9abb06a47bb5fa1], 
PUP.Optional.Infonaut.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\insvc_1.10.0.14, In Quarantäne, [747cd20c5d2d152124a43b5839cd7f81], 
Trojan.Downloader, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\mutk, In Quarantäne, [a24e29b53753ff37de380d68ee14e31d], 
Trojan.Agent.SV, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\systemD, In Quarantäne, [13ddd70774161d19c14efa4b18ee40c0], 
Trojan.Downloader, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\utk, In Quarantäne, [ef01924caddd26105a7db1b38f73ef11], 
PUP.Optional.WordShark.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wssvc_1.10.0.19, In Quarantäne, [dc14f7e77d0d69cd8b0c5d12aa58867a], 
Trojan.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\xoperoze, In Quarantäne, [7c748d51b2d8e84e2e1887e5f70bf907], 
PUP.Optional.PullUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\xpvrBXqvyb, In Quarantäne, [569a9e40ec9e132368f85d37848245bb], 
PUP.Optional.Goobzo.SID.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SMUpdd, In Quarantäne, [5e927668078338fe479fe3b0df2710f0], 
PUP.Optional.ModGoog, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, In Quarantäne, [c828429c6e1c55e1be8818364bb757a9], 
PUP.Optional.ModGoog, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, In Quarantäne, [c828429c6e1c55e1be8818364bb757a9], 
PUP.Optional.ModGoog, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GLOBALUPDATE.EXE, In Quarantäne, [c828429c6e1c55e1be8818364bb757a9], 
PUP.Optional.ModGoog, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GLOBALUPDATE.EXE, In Quarantäne, [c828429c6e1c55e1be8818364bb757a9], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [2cc404da6d1dc86e698b3f42ad5648b8], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [2cc404da6d1dc86e698b3f42ad5648b8], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [2cc404da6d1dc86e698b3f42ad5648b8], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{934B156A-3D17-3981-B78A-5C138F423AD6}\INPROCSERVER32, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3FC2D59A-5C76-1E97-30DC-1EC6784419E5}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{63D2A451-3351-178C-7BC4-13C4D58A7652}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{63D2A451-3351-178C-7BC4-13C4D58A7652}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{63D2A451-3351-178C-7BC4-13C4D58A7652}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3FC2D59A-5C76-1E97-30DC-1EC6784419E5}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{3FC2D59A-5C76-1E97-30DC-1EC6784419E5}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\adTech.adTech.1, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\adTech.adTech, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\adTech.adTech, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\adTech.adTech, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\adTech.adTech.1, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\adTech.adTech.1, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{934B156A-3D17-3981-B78A-5C138F423AD6}, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [43ad6a744e3cdd59a023720f768dad53], 
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [43ad6a744e3cdd59a023720f768dad53], 
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [43ad6a744e3cdd59a023720f768dad53], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.LuckyTab.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.Tuvaro, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}, In Quarantäne, [f4fc9b43008a0630944a9be024dfdd23], 
PUP.Optional.Tuvaro, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}, In Quarantäne, [f4fc9b43008a0630944a9be024dfdd23], 
PUP.Optional.PullUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DesktopSearch, In Quarantäne, [816f4698acde41f5f66a850f9373c838], 
PUP.Optional.Downloader.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BrowserV30.06, In Quarantäne, [b8388a5404863df9df5802761fe33ac6], 
PUP.Optional.Downloader.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinemaPlus-3.2cV06.07, In Quarantäne, [915fa03e4e3cd66074c3d2a6b84a4eb2], 
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{780FF01C-B13B-BF9C-BA0B-7B16D3644C67}, In Quarantäne, [f8f8f8e68dfd999d54ef68e854ae9769], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{D772602B-5B65-4115-A431-7DF29B681A60}, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\PD772602B_5B65_4115_A431_7DF29B681A60_.PD772602B_5B65_4115_A431_7DF29B681A60_, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\PD772602B_5B65_4115_A431_7DF29B681A60_.PD772602B_5B65_4115_A431_7DF29B681A60_.9, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PD772602B_5B65_4115_A431_7DF29B681A60_.PD772602B_5B65_4115_A431_7DF29B681A60_, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PD772602B_5B65_4115_A431_7DF29B681A60_.PD772602B_5B65_4115_A431_7DF29B681A60_.9, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PD772602B_5B65_4115_A431_7DF29B681A60_.PD772602B_5B65_4115_A431_7DF29B681A60_, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PD772602B_5B65_4115_A431_7DF29B681A60_.PD772602B_5B65_4115_A431_7DF29B681A60_.9, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D772602B-5B65-4115-A431-7DF29B681A60}, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.WordShark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WordShark_1.10.0.19, In Quarantäne, [47a988568dfd77bfaaed610e7f8342be], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010014_is1, In Quarantäne, [3db33ba30f7b2b0bcb338a091de9bb45], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010015_is1, In Quarantäne, [bf3120be1a707eb89866850e0df942be], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010017_is1, In Quarantäne, [e01003dbafdb1e186599c3d06b9beb15], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010018_is1, In Quarantäne, [18d8fde1f69476c05ba3bcd7f80e02fe], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010020_is1, In Quarantäne, [a050637b0783072fab531b788b7b37c9], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010022_is1, In Quarantäne, [fef231ad3a502e0810ee0c87060044bc], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010023_is1, In Quarantäne, [797778669eec38fe42bca8eb9c6a51af], 
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_de_005010024_is1, In Quarantäne, [49a701dd2367f93da7571182b05631cf], 
PUP.Optional.Infonaut.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Infonaut_1.10.0.14, In Quarantäne, [2ec2786690fa2610a325890ae026926e], 
PUP.Optional.Unizeto, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, In Quarantäne, [03eda43a56343303ae8cea50837f2ed2], 
PUP.Optional.Unizeto, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, In Quarantäne, [03eda43a56343303ae8cea50837f2ed2], 
PUP.Optional.SmartWeb.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SmartWeb, In Quarantäne, [945cb8263c4eca6c6f3e4cbc9a6823dd], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Ge-Force, In Quarantäne, [41afd7076b1f78be5db2bc450400827e], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Object Browser, In Quarantäne, [e10fa13d692184b29b7415ec8c781ae6], 
PUP.Optional.ASPackage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ASPackage, In Quarantäne, [1dd324ba3357162035e6090a0ef6b54b], 
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\mystartsearch uninstall, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ShopperPro, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPDRIVER_1.42.1.2069, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\gisidypy, In Quarantäne, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nosepoze, In Quarantäne, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zedepory, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\xoperoze, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\posipyno, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\vicoqudu, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zejytose, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bidykiny, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\HighDefAction, In Quarantäne, [3db33da1424895a1d5bb2c6e37ce0ef2], 
PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\YorkNewCin, In Quarantäne, [48a8d40af298f640a7f4bbdf08fd6e92], 
PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, In Quarantäne, [5e9216c8a8e2ce68ef80e0b6da2b27d9], 
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\CLASSES\CRSBRWSHTML, In Quarantäne, [5e92b727870393a39ba30103d72d8b75], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [bb35bd2121690f27c608b9da9b6a6898], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, In Quarantäne, [a0509d41afdb3204329c5c37e223be42], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, In Quarantäne, [2ec2a13d7b0fff3708c6c9caae577a86], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync, In Quarantäne, [1fd1a23c5f2b0234f4db1e7521e4b64a], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, In Quarantäne, [cb259f3f3f4bda5c0bc46d26b64fcb35], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass, In Quarantäne, [22ce4c928505d660bf10157ed5303dc3], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass.1, In Quarantäne, [f4fce8f68a00181efdd2e7ac16efe020], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass, In Quarantäne, [fef2ac328a00b08608c75c37f70e629e], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, In Quarantäne, [757b429ca2e8d36324abbbd825e0c937], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, In Quarantäne, [935dbe20880292a410bfdfb4e5205ea2], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, In Quarantäne, [7a76b628e9a1d75f2fa0355e51b414ec], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, In Quarantäne, [0ee206d86e1cf442ebe4f1a2798c45bb], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, In Quarantäne, [46aa9a44f09a49edba157c17f41129d7], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [a24e8d51a5e5e5515679c0d39b6a9769], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, In Quarantäne, [0ce41dc12862c5716669b4df2cd96997], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, In Quarantäne, [8f6109d51a70fe38b31c058e14f13bc5], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [5d93d50958323600b21dd3c00afbbf41], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher, In Quarantäne, [668afce2f595f83e7758deb5e61f35cb], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, In Quarantäne, [31bf835b1b6fbd7923ac12819a6bf010], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService, In Quarantäne, [7080a836a5e57eb8438c3360d431b749], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, In Quarantäne, [48a81ec0187276c09a353e558f764cb4], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine, In Quarantäne, [32beb529bdcd0531ddf2464da85d8779], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, In Quarantäne, [2ec29549107a280e4e81bdd6a164b24e], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, In Quarantäne, [c32d647ae8a294a2e7e8d1c251b4a759], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, In Quarantäne, [4ca417c73456a78f1ab5fe95f70e58a8], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc, In Quarantäne, [08e82cb23951132300cf068d689d7b85], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, In Quarantäne, [7977637b0e7c0135be11444fbe4712ee], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE, In Quarantäne, [e907cb13e0aa42f41fdb0790e421ed13], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE, In Quarantäne, [ac4411cd2565b086c337c6d1e71ee21e], 
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\Crossbrowse, In Quarantäne, [ad438757f397f0464e1a19ebc0448f71], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\20891, In Quarantäne, [9b556b737317132396310c37cc380bf5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, In Quarantäne, [5a96ad31e3a7d85e08bf9ea5699b54ac], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [9c54fbe3a1e9ea4c7e49222117ed8080], 
PUP.Optional.SearchModule.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [e40c0cd2f5953303d961dbbe55b0c838], 
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\crossbrowse.exe, In Quarantäne, [ca26805e96f4ba7cc17ed82cf014d828], 
PUP.Optional.ShopperPro.C, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\ShopperPro.exe, In Quarantäne, [539d647a45455bdb093c8381ed17b64a], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [13dd6f6fcdbdf24409af93087a8be61a], 
PUP.Optional.Goobzo.C, HKLM\SOFTWARE\SEARCHMODULE\SMUPD, In Quarantäne, [5c945e809dedfd39e4173e59689dc43c], 
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\AskPartnerNetwork, In Quarantäne, [648cb22cc9c1132392c63cc42dd737c9], 
PUP.Optional.BrowserApps.A, HKLM\SOFTWARE\WOW6432NODE\BrowserV30.06, In Quarantäne, [cc24af2f5931a59150f1dd25cf35b14f], 
PUP.Optional.BrowserApps.A, HKLM\SOFTWARE\WOW6432NODE\BrowserV30.06-nv-ie, In Quarantäne, [da167b63ccbebc7a043d04febc48a65a], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV06.07, In Quarantäne, [767a617d6f1b5ed83cf90a0e4fb59e62], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV06.07-nv-ie, In Quarantäne, [f5fbb628fa90f046e1549385f311c43c], 
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\Crossbrowse, In Quarantäne, [dc14637b9ceec27434302bd97f856e92], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\GAMESDESKTOP, In Quarantäne, [b73914ca771330060cb750c5b94b8080], 
PUP.Optional.GeForce.A, HKLM\SOFTWARE\WOW6432NODE\Ge-Force, In Quarantäne, [5997e6f8a9e15bdbc4dc9aeafb0a5ca4], 
PUP.Optional.GeForce.A, HKLM\SOFTWARE\WOW6432NODE\Ge-Force-nv-ie, In Quarantäne, [5e927b635f2bfe385476612e5aab4fb1], 
PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, In Quarantäne, [0ae6845ad9b12f07a1efd9c156af0ef2], 
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, In Quarantäne, [06ea7f5f4545043206f644cd50b4fe02], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [cd232bb3dbaf00364903bd9354b07e82], 
PUP.Optional.Infonaut.A, HKLM\SOFTWARE\WOW6432NODE\Infonaut_1.10.0.14, In Quarantäne, [3cb49f3ffd8da1956daeda299c68936d], 
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, In Quarantäne, [a947ad31e4a660d66da5bb5e55aff20e], 
PUP.Optional.ObjectBrowser.A, HKLM\SOFTWARE\WOW6432NODE\Object Browser, In Quarantäne, [b040706e008ab2843c64f4786e9748b8], 
PUP.Optional.ObjectBrowser.A, HKLM\SOFTWARE\WOW6432NODE\Object Browser-nv-ie, In Quarantäne, [f000ebf3bad076c0ba7359b1ed1733cd], 
PUP.Optional.SuperClick.A, HKLM\SOFTWARE\WOW6432NODE\SuperClick_1.10.0.16, In Quarantäne, [d61ae2fcaae073c37ce7a6f37a8bd42c], 
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, In Quarantäne, [be32cf0f167444f2308e216252b39b65], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WajIntEnhance, In Quarantäne, [0be514ca99f123137543dc32cd376d93], 
PUP.Optional.WordShark.A, HKLM\SOFTWARE\WOW6432NODE\WordShark_1.10.0.19, In Quarantäne, [faf6c7178505fa3c7fa29a04a26302fe], 
PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, In Quarantäne, [8f61d40abbcf4de9504b6832fa0b25db], 
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [18d804da8406979f07a918852adbe917], 
PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, In Quarantäne, [2ec215c9c5c594a2f7ba6439e71eb54b], 
PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [ad43c41acdbde155b45a40c215ef619f], 
PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, In Quarantäne, [a64a4a94e1a968ceea85474f16ef2ad6], 
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CRSBRWSHTML, In Quarantäne, [fdf3815d3b4f50e68faf20e49f659967], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, In Quarantäne, [ca26cc128dfd9a9cf8d6058e8e77d32d], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, In Quarantäne, [9d534797d7b36fc7ddf1f89bb64f8d73], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, In Quarantäne, [7d734599e6a48aac23ab147fe421728e], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync, In Quarantäne, [896702dceb9f1a1c3a95c9ca22e36b95], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, In Quarantäne, [5c949c4288023600537cabe8798c837d], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass, In Quarantäne, [bb35c51942489d9939962a69a461e818], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass.1, In Quarantäne, [7b753ba30b7f350118b7563dba4b38c8], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass, In Quarantäne, [48a866784446043212bd197ade27d729], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, In Quarantäne, [46aa32ac206a4cea6867771c54b19a66], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, In Quarantäne, [5997cf0f7c0eac8a8d422073fb0a4cb4], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, In Quarantäne, [1ad6726c2961e056a12e5c3749bc01ff], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, In Quarantäne, [b33d7668ed9d7abc705fcbc8ad58ef11], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, In Quarantäne, [975978666e1c2f072aa5abe8f213ac54], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, In Quarantäne, [ab457b63acde082ed6f9f0a30500c63a], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, In Quarantäne, [f1ff8856abdfa2948d42405324e102fe], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, In Quarantäne, [18d84a94addd87af88475a39887d29d7], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, In Quarantäne, [36babe20543663d322ad306322e3857b], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher, In Quarantäne, [638d78662f5b9e9805ca7a19d82dde22], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, In Quarantäne, [57997b63c4c62511339ce3b04fb630d0], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService, In Quarantäne, [ad439e40beccc96d3b94cac9877e5fa1], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, In Quarantäne, [6789e3fb3e4cf93d0fc01d76e61f2ed2], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine, In Quarantäne, [9c54b42a2565c96defe08e0573924cb4], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, In Quarantäne, [965a88560684a1950bc4a2f1a95c9769], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, In Quarantäne, [4ba5dd01ec9ee25418b7dbb828dd9967], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, In Quarantäne, [c52b14caf892a88ef6d92a696c993bc5], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc, In Quarantäne, [539ddfff6c1e54e2507f751ed03556aa], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, In Quarantäne, [a44cf7e7a3e7082ed4fbeda6ae570000], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE, In Quarantäne, [e60af0ee28620b2bfcfe663159ac47b9], 
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\Crossbrowse, In Quarantäne, [7b75d7071674af87dc8ca85cb35101ff], 
PUP.Optional.FastSearch.A, HKLM\SOFTWARE\WOW6432NODE\FASTSEARCH, In Quarantäne, [fcf4dd01bccecf6708eb3b63eb1ac838], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE\Clients, In Quarantäne, [1ad6439beaa02a0c23b60f8af80d867a], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\20891, In Quarantäne, [33bda5391278d56127a0ef5454b043bd], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21836, In Quarantäne, [3bb50fcf4a401323f6d16cd784800bf5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [af4146988cfe1c1a5374ac971ee68878], 
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\MEDIAPLAYER\SHIMINCLUSIONLIST\crossbrowse.exe, In Quarantäne, [1cd44e90167480b6bcaa9173e91b50b0], 
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\crossbrowse.exe, In Quarantäne, [23cd12cc8a00023486b9cb394bb98977], 
PUP.Optional.ShopperPro.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\ShopperPro.exe, In Quarantäne, [3fb16e703258dd59f25391739c68ff01], 
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Crossbrowse, In Quarantäne, [68883f9ffb8fd4621f25a460956f29d7], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, In Quarantäne, [c22ebe20ff8bd264944ba56615efd42c], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, In Quarantäne, [856b8757d6b451e5924cef1cd62ea25e], 
PUP.Optional.TomorrowsGames.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\TomorrowGames, In Quarantäne, [648c7f5f3f4b7db9274cf5a9897cf709], 
PUP.Optional.VoPackage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPackage, In Quarantäne, [d818548a0f7b38fe95b0d9b942c341bf], 
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, In Quarantäne, [f9f7637b8406dc5aee91e831a16307f9], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, In Quarantäne, [8a66429ce1a96fc711ccd536c93bc13f], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{23cb3056}, In Quarantäne, [3db332ac2e5c42f48786abef6f966d93], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{24a6f44f}, In Quarantäne, [945c39a57a108caaf518f4a6010432ce], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{54cc00c0}, In Quarantäne, [f0002ab43f4b9c9aff0ed1c9c44125db], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{caa89563}, In Quarantäne, [13dda33ba6e4d85e39d4336764a1b54b], 
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, In Quarantäne, [7f71ad3149418bab9f6e693126dfb44c], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [c22e825c513944f2272103838a7b04fc], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [5e9232ac7b0f14227ccde4a23cc960a0], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [e40ce6f8c5c5979f2a8e2f6c778e16ea], 
PUP.Optional.SearchModule.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHMODULE\SMUpd, In Quarantäne, [c7294b9314765adcc152c0dbd134629e], 
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\SHOPPERPRO, In Quarantäne, [48a8bc229feb75c134d617ff7e8621df], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [b838ab33662483b32f93c56051b39f61], 
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, In Quarantäne, [965ac31bdbafbd79e28cfc93bb4a55ab], 
PUP.Optional.Infonaut.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\innfd_1_10_0_14, In Quarantäne, [658b11cd7d0d11250910d52ed82c5ea2], 
PUP.Optional.SuperClick.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\scfd_1_10_0_16, In Quarantäne, [32bee9f5ec9e8caabda73b5e9d68619f], 
PUP.Optional.WordShark.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wsfd_1_10_0_19, In Quarantäne, [1cd46579dbaffc3ac062bae494713dc3], 
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64, In Quarantäne, [d41cf5e9f29800366f763cd95aaa2ed2], 
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, In Quarantäne, [866aeaf43a506dc967761308fe06e020], 
PUP.Optional.Goobzo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SMUPD, In Quarantäne, [04ecf2ec6f1b63d3794c2773d72e6898], 
PUP.Optional.BrowserApps.A, HKU\S-1-5-18\SOFTWARE\BrowserV30.06-nv-ie, In Quarantäne, [6789f3eb4d3d54e265dd69995aaad52b], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV06.07-nv-ie, In Quarantäne, [a24e1fbff99185b174c273a55ca80af6], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV25.05-nv-ie, In Quarantäne, [36baa13d7218c3735ed81800758fab55], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV26.06-nv-ie, In Quarantäne, [915fecf2f298979f82b451c72bd942be], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV28.06-nv-ie, In Quarantäne, [b23e06d8cac0b48239fd38e0dd270ef2], 
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\Cinemax Plus 1.9cV20.05-nv-ie, In Quarantäne, [6090b6283a502511b4ce3dcfd52f1ee2], 
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\Cinema_Plus-1.2V25.05-nv-ie, In Quarantäne, [5a96647ad7b3db5b24b4a974bd479070], 
PUP.Optional.GeForce.A, HKU\S-1-5-18\SOFTWARE\Ge-Force-nv-ie, In Quarantäne, [717f67774c3e2f07ccffa5ea62a3d42c], 
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\HQ Video Pro 3.1cV19.05-nv-ie, In Quarantäne, [8a6603dbbcce9b9bd5ad4cc02bd923dd], 
PUP.Optional.MediaPlayer.A, HKU\S-1-5-18\SOFTWARE\MediaPlayerVid2.4-nv-ie, In Quarantäne, [10e0934bc7c31026ba01ee18ae569868], 
PUP.Optional.ObjectBrowser.A, HKU\S-1-5-18\SOFTWARE\Object Browser-nv-ie, In Quarantäne, [648cab336b1f5dd95bd30406778d9070], 
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [ef01aa34f6941f17159a0b920ef7ce32], 
PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, In Quarantäne, [04ecbd2176148caa78fa9006db2add23], 
PUP.Optional.Shopperz.A, HKU\S-1-5-19\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, In Quarantäne, [a749d80627637bbb110db454ad575ea2], 
PUP.Optional.Shopperz.A, HKU\S-1-5-20\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, In Quarantäne, [46aa9a44008a6fc763bb75933cc88d73], 
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\AskPartnerNetwork, In Quarantäne, [2dc3be207911d75f084f43bdb054d729], 
PUP.Optional.BrowserApps.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\BrowserV30.06-nv-ie, In Quarantäne, [579920be8a00f54185bdf30f2dd7fb05], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CinemaPlus-3.2cV06.07, In Quarantäne, [08e815c9018951e5989eb95ff31116ea], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CinemaPlus-3.2cV06.07-nv-ie, In Quarantäne, [26caa13d2169c86eb97de83049bba35d], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CinemaPlus-3.2cV25.05-nv-ie, In Quarantäne, [ef0118c6ddad201690a638e015ef827e], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CinemaPlus-3.2cV26.06-nv-ie, In Quarantäne, [4aa6f2ecdeac45f1a5911ff9768e867a], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CinemaPlus-3.2cV28.06-nv-ie, In Quarantäne, [d21efae43a5091a585b192862cd835cb], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Cinemax Plus 1.9cV20.05-nv-ie, In Quarantäne, [32be9d41503a2d093052b359dd276a96], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Cinema_Plus-1.2V25.05-nv-ie, In Quarantäne, [19d734aa0486e15523b5ae6f1be9b848], 
PUP.Optional.Crossbrowse.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Crossbrowse, In Quarantäne, [14dcaa345634cc6af46fde26f80cb14f], 
PUP.Optional.Crossbrowse.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CrossBrowser, In Quarantäne, [6e826c72aedc0531df84c53fa95b7c84], 
PUP.Optional.GeForce.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Ge-Force, In Quarantäne, [b93708d6d3b768cee5bc90f4877e41bf], 
PUP.Optional.GeForce.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Ge-Force-nv-ie, In Quarantäne, [bb3530ae741651e57f4cc4cbd03546ba], 
PUP.Optional.HighDefAction.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\HighDefAction, In Quarantäne, [7c7411cd8dfd88ae94fb8f0b51b4c838], 
PUP.Optional.HomeTab.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\HomeTab, In Quarantäne, [be326876682262d403a2979f51b36997], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\HQ Video Pro 3.1cV19.05-nv-ie, In Quarantäne, [569ac31be7a33cfad8aac8441de7837d], 
PUP.Optional.iWebar.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\iWebar-nv-ie, In Quarantäne, [10e0e3fbafdba393e040ba55ca3aed13], 
PUP.Optional.MediaPlayer.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MediaPlayerVid2.4-nv-ie, In Quarantäne, [7a76ba24ccbeda5c328920e652b2a35d], 
PUP.Optional.NoVooIT.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\NoVooITSet, In Quarantäne, [24ccdd01e4a6c175d41fbf51da2aee12], 
PUP.Optional.ObjectBrowser.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Object Browser-nv-ie, In Quarantäne, [21cf6d7102886fc7c965f01ab35115eb], 
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\SearchProtectWS, In Quarantäne, [0ae6e1fd5e2c49edb22f070427dde818], 
PUP.Optional.TNT.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\TNT2, In Quarantäne, [13dde4fa0e7c1026d0bb33dace36c33d], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\TutoTag, In Quarantäne, [5c94b02e1a70d4626a046521d62f8d73], 
PUP.Optional.Vonteera.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Vonteera Safe ads, In Quarantäne, [2ac62db198f28caad5c0c85e4db7db25], 
PUP.Optional.Wajam.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\WajIEnhance, In Quarantäne, [1ed27569eaa0b086b2df130058ac02fe], 
PUP.Optional.Wajam.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\WajIntEnhance, In Quarantäne, [1fd1f7e7216973c3a5146ca249bb6b95], 
PUP.Optional.YorkNewCin.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\YorkNewCin, In Quarantäne, [a84814caf7932313bddd7327c93c718f], 
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [717ff2ec7713b3834e61346917eeb14f], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [519f0ed0cdbd5cdad31b64141de842be], 
PUP.Optional.CinemaPlus.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\ARENAHD, In Quarantäne, [cd2306d80b7fbf771a54752119ec4eb2], 
PUP.Optional.GamesDesktop.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\GAMESDESKTOP, In Quarantäne, [c52ba03ee6a42511ba9c97fe13f20ef2], 
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, In Quarantäne, [7a767b636327a294e15057ad4cb88e72], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\20891, In Quarantäne, [40b0d5092862b77ff85a67bb7e86ee12], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, In Quarantäne, [29c72ab4fe8c69cdec66ba68976ded13], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, In Quarantäne, [757b2eb090fa36007ed468ba26de23dd], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\BrowserV30.06, In Quarantäne, [bc34716d5535df57bc2ccb40d133659b], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema PlusV06.07, In Quarantäne, [50a0c41a7218fc3ac2f42ee9bf456b95], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\ObjectB, In Quarantäne, [ef017b63b3d70234a25d9778867e05fb], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Webar, In Quarantäne, [19d7637b0585e94d81a47e91798b55ab], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [cf2177671b6f8caa33b2fd978c79a45c], 
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0C1FC429-6F1B-41CA-B6C6-4EBB762616E0}, In Quarantäne, [f3fdd806038771c5f5449cfd55b0b848], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}, In Quarantäne, [9a56ecf2dcaed6604c991e76c144d12f], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1C99518C-A4EC-4773-A275-A30EA940645F}, In Quarantäne, [87694a94b8d29f97dc092f654cb98d73], 
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}, In Quarantäne, [658ba8364446270fb47fa9e95aabdf21], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}, In Quarantäne, [22ce5b83cdbdb086d411385c7590a35d], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{302EA73E-5E33-4733-8C70-859686AEA2D8}, In Quarantäne, [49a79945652547eff1f4f69ef80d44bc], 
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{328FD3F7-859A-45DF-81A2-A8093C98FCB6}, In Quarantäne, [0de3a13da7e32511cd6c2079fc098080], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [ec04c6188109c67039ac286c0bfa23dd], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}, In Quarantäne, [26ca35a9eb9f79bdbc29c2d2a16446ba], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4262F844-0326-4B1A-AB34-A236B5C8B14F}, In Quarantäne, [fef2bb2399f163d3776e1a7ab352e818], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4BA977DC-68DB-4F84-A30E-D499A04490BB}, In Quarantäne, [de12e4fa791173c3bb2afa9a6b9aae52], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{50DCBAFD-BBBD-4A48-A0A5-04BAAE53C9FA}, In Quarantäne, [9d533ba3870373c3ca1beaaabd48926e], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}, In Quarantäne, [6888e0fe602a75c1865f454f768fd62a], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{56ABDC89-A3BF-4E52-AED1-A8C3C67F7E26}, In Quarantäne, [05eb6975c5c5f640f9ec9df708fd32ce], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5AE085F2-CD0C-4726-AD6B-1DA1DF6EEFE0}, In Quarantäne, [658b4d91b2d81d198e576b29e81d6a96], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}, In Quarantäne, [ea066e70a6e4162003e2cfc56e97af51], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}, In Quarantäne, [866a6678b1d958de697c563ed62faa56], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{61912F67-A3C5-444A-A22E-A32FACC8279D}, In Quarantäne, [00f07f5f9ded88ae776ecbc922e304fc], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{64724F2F-7BB6-4B8A-8FA7-699B7B8B700A}, In Quarantäne, [0ce44995b5d5e55128bdd9bb6f96827e], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}, In Quarantäne, [bb35439b7515cf67b431583c40c5f709], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}, In Quarantäne, [ce22c31b5238ae8836af880c21e41ee2], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{771F458C-6AD2-45CA-8DFE-C5FCCC46E843}, In Quarantäne, [e7090ed0ff8b3204f7eedfb5f312bf41], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DA867DD-7B5E-417D-BAB1-727A4CBA842A}, In Quarantäne, [3db310ce286265d1f1f497fdf114748c], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{826DE994-6CF5-45E7-A9C9-6FB3871981B4}, In Quarantäne, [28c8d10d17732f07cb1a553fbb4aa55b], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{82EC5833-23FD-4BFF-A3B9-31CCE9BB681D}, In Quarantäne, [02eefae40d7d8da9e6ff583c3acb2bd5], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}, In Quarantäne, [06ea5688c2c89d993ca9ddb751b402fe], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{87291DD9-E49E-448A-BC74-FB8376B49B9F}, In Quarantäne, [f9f77f5f8a0089ad25c0ddb745c018e8], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}, In Quarantäne, [519fe8f61773989e4c994b4964a140c0], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A2E45484-3709-4722-BB1E-69A4A18C432E}, In Quarantäne, [25cbfce2d9b12610796c6034c243619f], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AC5705F9-B6C2-4FAA-8B10-C8CF4501696E}, In Quarantäne, [c42c6c72f5956ec8677e375d9f66d030], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0108BC3-325D-48BF-A10D-644078A06C74}, In Quarantäne, [846cd70721697cba7c691c78c5401de3], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B01364E5-11EE-4054-8249-C90F09010C2A}, In Quarantäne, [47a90cd26f1b181ea73e890b51b4867a], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B1C998E3-DFB5-42DC-8525-610E0D265E35}, In Quarantäne, [30c0cb131e6cb2848d58494b27de738d], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B35B71B0-E14D-425E-BC39-C2429E38977D}, In Quarantäne, [f9f7f6e89ceeb87e25c0dbb9da2b47b9], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}, In Quarantäne, [618fca141d6db87ecd18f3a11ce96a96], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}, In Quarantäne, [22cebe202a6059dd10d56a2a1de819e7], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B7DAC08E-50F7-45F6-8652-58563EDA38C7}, In Quarantäne, [b33d28b6d6b4d561687d4c489471ec14], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B968CFAC-3A02-433D-9234-A465B7EFD6BD}, In Quarantäne, [777901ddeb9f58deeef77b1920e5c33d], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA0FCB1F-7BBB-4380-AF52-3F1E4C6D8DDE}, In Quarantäne, [04ec6e7008823afc8263563e8e776c94], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BD2D2F9A-9C45-496A-9DCA-0F9A26EAD548}, In Quarantäne, [9060c01e8901dd59bd284d47b84d8b75], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}, In Quarantäne, [d21e21bd0a8082b47f66b0e4a46132ce], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}, In Quarantäne, [2dc3e4fa9af03bfb8f560f8516efb54b], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C721DCB1-33E3-470D-A292-8524D668B956}, In Quarantäne, [c9270ad43f4bc86e895c8f05778e9f61], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}, In Quarantäne, [f000d905bbcfb87eeef78014e61f8977], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}, In Quarantäne, [599722bccac0d660ba2ba2f2679e01ff], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}, In Quarantäne, [fdf3edf11b6f1125f5f0049032d3b14f], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D8459AB5-9DC9-4671-B362-1DD8D32EBDF2}, In Quarantäne, [26ca835bbfcb3cfa24c1aaea867f53ad], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D855934B-E6F2-4C45-9917-8A9D86CCB636}, In Quarantäne, [7977459934562c0ac520b9dbe71e2fd1], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}, In Quarantäne, [658b8d51b6d449ed469ffb9930d5c23e], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, In Quarantäne, [e10fd5094a4074c25293534151b42ad6], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EC5D4994-C3EC-4411-9F5E-83CB4DD233C9}, In Quarantäne, [16daecf20d7d5cda4b9a4a4a54b19f61], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}, In Quarantäne, [bf31edf1f793013514d1eca87b8ad22e], 
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}, In Quarantäne, [945cb8264446cb6bf9ec5f35aa5bf60a], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, In Quarantäne, [7977914d88021c1ae1a431d77d877f81], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, In Quarantäne, [bd33cf0f523861d5186ea26639cb837d], 
PUP.Optional.Linkey.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Linkey, In Quarantäne, [f8f8ad31fb8faa8c6126798f63a106fa], 
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, In Quarantäne, [4da32cb22367af877a8afc9a0ff6d729], 
PUP.Optional.Vosteran.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, In Quarantäne, [0ce45e809ded1026d8b03aced72d25db], 
PUP.Optional.Wajam.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, In Quarantäne, [0de3ad31048657df17729771c143e11f], 
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\OPTIMIZER PRO, In Quarantäne, [28c8627cfb8fce68d28acad10401f10f], 
PUP.Optional.HomeTab.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\SIMPLYTECH\HomeTab, In Quarantäne, [0ae6b52999f1290d772a2e1d3bc94bb5], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\TUTORIALS\updatetutorialeshp, In Quarantäne, [e808f4eaeaa0a096889354b9669e7a86], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\TUTORIALS\updatetutorialshp, In Quarantäne, [a749c5197911a393f22a57b633d14cb4], 
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\TUTORIALS\updv, In Quarantäne, [12deab330f7bc76fea3338d5af55fe02], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-500\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, In Quarantäne, [d020fce23c4e0d29aca6190911f37888], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickCtrl.10, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.Update3WebControl.4, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.Goobzo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Search module, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpd, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpdd, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\ShopperPro.ShopperProBHO, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO.1, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\ShopperPro.ShopperProBHO.1, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\INPROCSERVER32, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.BubbleSound.A, HKLM\SOFTWARE\CLASSES\CLSID\{1386F2A3-FEB9-4C55-AD9A-B798EE57299B}, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, HKLM\SOFTWARE\CLASSES\CLSID\{7FDF7A92-F901-4F93-9769-A8AC41C8E563}, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BubbleSound, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.AnyProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AnyProtect, In Quarantäne, [c12f9648a3e739fd399fed1024df29d7], 

Registrierungswerte: 348
Trojan.Agent.SV, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|svhost, "C:\Users\Lucas\AppData\Local\Temp\svhost.exe" run, In Quarantäne, [13ddd70774161d19c14efa4b18ee40c0]
PUP.Optional.Tuto4PC.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|upgmsd_de_005010014.exe, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010014.exe -runonce, In Quarantäne, [11dfb925f793280e13db237060a645bb]
PUP.Optional.PullUpdate.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DesktopSearch, C:\ProgramData\DesktopSearch\DesktopSearch.exe -ros, In Quarantäne, [9759558957332b0b4719bed63ec842be]
PUP.Optional.Crossbrowse.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_54B9B10C965532F3346EDA3E7C14378D, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window, In Quarantäne, [9c5489552c5e57df40c4147f61a5df21]
PUP.Optional.SmartWeb.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SmartWeb, C:\Users\Lucas\AppData\Local\SmartWeb\SmartWebHelper.exe, In Quarantäne, [668ab32b1c6ed066ecc149bfbf43aa56]
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_005010024, "C:\Program Files (x86)\gmsd_de_005010024\gmsd_de_005010024.exe", In Quarantäne, [d21e97476822d36339c59102f511e21e]
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\jsdrv.exe, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff]
PUP.Optional.ShopperPro, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\jsdrv.exe, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff]
PUP.Optional.DeskBar.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|deskbar, "C:\Users\Lucas\AppData\Local\DeskBar\dblaunch.exe"  F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a, /noar, In Quarantäne, [c729657965258bab1ce53d64818448b8]
PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, In Quarantäne, [5e9216c8a8e2ce68ef80e0b6da2b27d9]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\.HTML\OPENWITHPROGIDS|CRSBRWSHTML, In Quarantäne, [b23e0ed00f7bd5610a104a4efe079070], 
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\.HTM\OPENWITHPROGIDS|CRSBRWSHTML, In Quarantäne, [bc340ed08cfe1125c0590b8d61a438c8], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, In Quarantäne, [e907cb13e0aa42f41fdb0790e421ed13]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\.HTML\OPENWITHPROGIDS|CRSBRWSHTML, In Quarantäne, [36badc02e6a452e4ea30f7a11ee7d62a], 
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\.HTM\OPENWITHPROGIDS|CRSBRWSHTML, In Quarantäne, [39b7637b206a59dde534f2a6cc397090], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, In Quarantäne, [ac4411cd2565b086c337c6d1e71ee21e]
PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, In Quarantäne, [9f5177671872b185f981a6f0c342a15f]
PUP.Optional.SearchModule.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e40c0cd2f5953303d961dbbe55b0c838]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [30c0eaf40783d85e8ca841510302629e]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [c62a4b93a7e3b97d79bb108280858779]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconURL, http://www-searching.com/favicon.ico, In Quarantäne, [8a66db030d7d4aec0133d6bc16ef42be]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|URL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [9b55ac32f8922e082c08deb4e61f11ef]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [559b75691b6fe94dda5a078bc540c53b]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [de122fafb5d52610e84c3d551de84cb4]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|FaviconURL, http://www-searching.com/favicon.ico, In Quarantäne, [a44c01ddd0ba3cfa83b1e1b19273837d]
PUP.Optional.Searching.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [33bdcf0f2c5e61d58da7bbd715f0e020]
PUP.Optional.SearchModule.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [7e7233ab04860b2bef4b96031fe65da3]
PUP.Optional.SearchModule.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [9d539747bad068cebe7c366319ecf50b]
PUP.Optional.3DBubbleSound.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|3D BubbleSound, "C:\Program Files\BubbleSound\3D BubbleSound.exe", In Quarantäne, [1ad601dd276383b3c3c9837d0bf9d828]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [13dd6f6fcdbdf24409af93087a8be61a]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\REGISTEREDAPPLICATIONS|Crossbrowse, Software\Clients\StartMenuInternet\Crossbrowse\Capabilities, In Quarantäne, [3cb46876b5d51d19620f950109fc6f91]
PUP.Optional.Goobzo.A, HKLM\SOFTWARE\SEARCHMODULE\INFO|Aff, F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,, In Quarantäne, [e50b1fbfafdb13234fc1ee168a7aae52]
PUP.Optional.Goobzo.C, HKLM\SOFTWARE\SEARCHMODULE\SMUPD|Scf, ÷    ÐXÒ X±çüŽ” zXRŦ"Ÿ nƒÂV }÷˜'HÆPÀÈŸàmÃ'cž«‡ öÕduR;b6 YÍ9 ¾ = I¬"P¥Œ¥‘[9 =g©Pû³Kú‡/4“D: ‡óÀ5 ¤X®LJvÏ } ä3¥‚BßlóFW O®ÕqØ;ÃKÞ ±DiC €ä§[uf‡Ýs]!ûTo•Ñ‡¼-³å, In Quarantäne, [5c945e809dedfd39e4173e59689dc43c]
PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, In Quarantäne, [a64a4a94e1a968ceea85474f16ef2ad6]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\.HTML\OPENWITHPROGIDS|CRSBRWSHTML, In Quarantäne, [9f516e708ffbb284f9219107ef16926e], 
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\.HTM\OPENWITHPROGIDS|CRSBRWSHTML, In Quarantäne, [ae4285590585d2644ecbefa939ccd927], 
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, In Quarantäne, [e60af0ee28620b2bfcfe663159ac47b9]
PUP.Optional.FastSearch.A, HKLM\SOFTWARE\WOW6432NODE\FASTSEARCH|affid, 4435, In Quarantäne, [fcf4dd01bccecf6708eb3b63eb1ac838]
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATEDEV|AuCheckPeriodMs, 21600000, In Quarantäne, [eb053ba3c2c873c3841a2ad955af5ea2]
PUP.Optional.PCTuner.C, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, In Quarantäne, [2ec2845ab3d7063084f69bfb8a7ba65a]
PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|mbot_de_629, In Quarantäne, [03ed1cc2ef9b4cea8a7643e4b74d1ee2], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_533, In Quarantäne, [559bfce28208cf67d45f799db54f2bd5], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_555, In Quarantäne, [727e1fbf3b4ffe38d0634acc4abac937], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_579, In Quarantäne, [f1fffbe3a8e281b5dd56ad690df7cf31], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_005010002, In Quarantäne, [9060efefc5c558de3ef58f874db7f010], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_002020002, In Quarantäne, [26ca11cdbfcb5cda73c08294699b728e], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_005010012, In Quarantäne, [38b8aa3425655bdbb77cdc3a4bb99b65], 
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_005010013, In Quarantäne, [a749944a4c3e15212b089c7acf35bf41], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [e40ce6f8c5c5979f2a8e2f6c778e16ea]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\WOW6432NODE\REGISTEREDAPPLICATIONS|Crossbrowse, Software\Clients\StartMenuInternet\Crossbrowse\Capabilities, In Quarantäne, [6e827569ec9e181ef0814551fc096d93]
PUP.Optional.Goobzo.C, HKLM\SOFTWARE\WOW6432NODE\SEARCHMODULE\SMUPD|Scf, ÷    ÐXÒ X±çüŽ” zXRŦ"Ÿ nƒÂV }÷˜'HÆPÀÈŸàmÃ'cž«‡ öÕduR;b6 YÍ9 ¾ = I¬"P¥Œ¥‘[9 =g©Pû³Kú‡/4“D: ‡óÀ5 ¤X®LJvÏ } ä3¥‚BßlóFW O®ÕqØ;ÃKÞ ±DiC €ä§[uf‡Ýs]!ûTo•Ñ‡¼-³å, In Quarantäne, [e50baf2f2c5e0036c03b039416ef8c74]
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\SHOPPERPRO|aff, tutdk, In Quarantäne, [48a8bc229feb75c134d617ff7e8621df]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, cmi, In Quarantäne, [b838ab33662483b32f93c56051b39f61]
         
__________________

__________________

Alt 14.07.2015, 02:06   #18
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Code:
ATTFilter
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, 16F044A9-6739-4724-BC70-B374209267DA, In Quarantäne, [965ac31bdbafbd79e28cfc93bb4a55ab]
PUP.Optional.Vitruvian.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\insvc_1.10.0.14|ImagePath, "C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe", In Quarantäne, [dc147b63a6e43cfa6bbd059340c5659b]
PUP.Optional.Vitruvian.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wssvc_1.10.0.19|ImagePath, "C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe", In Quarantäne, [d21ef3eb75154aec38f04454858014ec]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bidykiny|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knssD725.tmpfs, In Quarantäne, [24cccc126624c3734884325f63a2d030]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\gisidypy|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\jnsyE35B.tmp, In Quarantäne, [569aa836404a83b3309ce0b1be478b75]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nosepoze|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\knszDDD4.tmp, In Quarantäne, [16da9f3f5f2b2c0a705c5c355aab6b95]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\posipyno|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\knsj93A4.tmp, In Quarantäne, [cd23ecf2a8e2f343913b207147beb749]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\vicoqudu|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\hnsn2166.tmp, In Quarantäne, [26ca23bb8efcc274a923415055b0669a]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\xoperoze|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\jnsi9809.tmp, In Quarantäne, [1cd45a84e7a3ba7c5775f69b19ec10f0]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zedepory|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\hnsiEA4F.tmp, In Quarantäne, [bf319b435337e94d7a52375ae124a759]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zejytose|ImagePath, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\jnsnF44C.tmp, In Quarantäne, [e907934b96f41422438980111bea837d]
PUP.Optional.Goobzo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SMUpd|ImagePath, C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe /service, In Quarantäne, [04ecf2ec6f1b63d3794c2773d72e6898]
PUP.Optional.Goobzo.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SMUpdd|ImagePath, \??\C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys, In Quarantäne, [49a729b54545f64051744a505baad828]
PUP.Optional.ShopperPro.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPDRIVER_1.42.1.2069|ImagePath, \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\jsdrv.sys, In Quarantäne, [50a07668f6949f97d930f906f90ac53b]
PUP.Optional.CinemaPlus.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\ARENAHD|value, 1, In Quarantäne, [cd2306d80b7fbf771a54752119ec4eb2]
PUP.Optional.CrossBrowse.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\CLIENTS\STARTMENUINTERNET, Crossbrowse, In Quarantäne, [07e9c6188a00c47250208511b74e3fc1]
PUP.Optional.GamesDesktop.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\GAMESDESKTOP|mj, 15.07.03.0, In Quarantäne, [c52ba03ee6a42511ba9c97fe13f20ef2]
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, In Quarantäne, [7a767b636327a294e15057ad4cb88e72]
PUP.Optional.PCTuner.C, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\HIGHDEFACTION|value, 1, In Quarantäne, [a34d5b8349412016b5c3f79f8f7645bb]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [cf2177671b6f8caa33b2fd978c79a45c]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [6888bd21ed9daf87a48f1a7809fc0000]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [9c543ca2860464d2e9507e1b7b8ae818]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [c32dd707444666d097a27029887d8e72]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0C1FC429-6F1B-41CA-B6C6-4EBB762616E0}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [f3fdd806038771c5f5449cfd55b0b848]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0C1FC429-6F1B-41CA-B6C6-4EBB762616E0}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [d61a4797f8926fc79f46286c59ac1de3]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [9a56ecf2dcaed6604c991e76c144d12f]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [05eb5b83fa9044f2ab88444e669f8878]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [f00035a97911dd59ad86aae8ed18956b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [1cd44995e8a287af0ed73460f312e41c]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [b0400ad44941ca6cbf74662c5da835cb]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [ba367f5fb7d33006ca6f8316b4513ec2]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EC4BBD1-7C1E-432D-A537-0278DF4E72BB}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e40c19c57b0f76c0de5bd6c338cd04fc]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1C99518C-A4EC-4773-A275-A30EA940645F}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [87694a94b8d29f97dc092f654cb98d73]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1C99518C-A4EC-4773-A275-A30EA940645F}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [9c5406d8226867cfb97ae4ae61a47888]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1C99518C-A4EC-4773-A275-A30EA940645F}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [2bc5746ad6b4a98d172285149e677c84]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1C99518C-A4EC-4773-A275-A30EA940645F}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [846c2eb0ed9d4de999a084156c992cd4]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|URL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [658ba8364446270fb47fa9e95aabdf21]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [668a19c56d1d65d1df54a1f1699ce818]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [bc34a836fd8d1125f73c6d25db2a18e8]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|FaviconURL, http://www-searching.com/favicon.ico, In Quarantäne, [807029b53b4f0c2a092a662c749132ce]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [965abb231773f93d1e155f33947123dd]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [bd33845ae5a534025edb7b1e8382a25e]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [bd338b53a5e576c08bae1089f70eda26]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [22ce5b83cdbdb086d411385c7590a35d]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [18d8d509eaa0142256dd167c10f538c8]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [b43cbf1f7c0ed36376bd3f535aaba65a]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [a848fce2c9c1e94dedf84e46a85d07f9]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [11dfb12d7a107abc0e25642e38cdb848]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [19d7637b3258979f79c0fe9b7c89847c]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2BFE99BC-5534-44C0-872C-56A226CA23B5}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [c82817c738524ee8b683a3f6d72e0bf5]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{302EA73E-5E33-4733-8C70-859686AEA2D8}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [49a79945652547eff1f4f69ef80d44bc]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{302EA73E-5E33-4733-8C70-859686AEA2D8}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [de12fde1c2c87cba47ecc5cd23e2718f]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{302EA73E-5E33-4733-8C70-859686AEA2D8}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e50be0fe3159a49237023c5d53b2669a]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{302EA73E-5E33-4733-8C70-859686AEA2D8}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [fcf412ccfe8c3204c27724755fa6ef11]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{328FD3F7-859A-45DF-81A2-A8093C98FCB6}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [0de3a13da7e32511cd6c2079fc098080]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{328FD3F7-859A-45DF-81A2-A8093C98FCB6}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [ef014e902e5c082ec71e593b64a19769]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, In Quarantäne, [ec04c6188109c67039ac286c0bfa23dd]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [8b65c31b5139eb4b796ce9abc5400000]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [6789c81699f149edac87ff931de80cf4]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [a0503ba3008a31051320a4eea263c739]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|FaviconURL, http://www-searching.com/favicon.ico, In Quarantäne, [35bb5a84f991cb6baa89672bf90c53ad]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [f000dd01bfcb45f134ff543e93720df3]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [05eb5886fb8f42f4d267a1f8818425db]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [807030ae90fae0562118f0a907fea35d]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [26ca35a9eb9f79bdbc29c2d2a16446ba]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [45abd40ae5a5a294ae85761c20e5bd43]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [e20e38a68a0076c0ec4799f9c441d32d]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [7f714995731780b618cd7c1811f48878]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [33bddd01f4963105d162b8da4db8659b]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [00f0c21ceb9f270f56e3f7a232d3f40c]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{38A77FE7-54DF-44A7-B832-B079B1E683D1}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [648ce5f92169dd59b2874851778edf21]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4262F844-0326-4B1A-AB34-A236B5C8B14F}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [fef2bb2399f163d3776e1a7ab352e818]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4262F844-0326-4B1A-AB34-A236B5C8B14F}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [0fe1c816bfcbda5cb77cbad863a2c23e]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4262F844-0326-4B1A-AB34-A236B5C8B14F}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [4fa1548a47439b9b2118a0f9798c946c]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4262F844-0326-4B1A-AB34-A236B5C8B14F}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [ac445c823654ef47a1980d8c0ff6b24e]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4BA977DC-68DB-4F84-A30E-D499A04490BB}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [de12e4fa791173c3bb2afa9a6b9aae52]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4BA977DC-68DB-4F84-A30E-D499A04490BB}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [2dc3845a1476e45210236e2436cf46ba]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4BA977DC-68DB-4F84-A30E-D499A04490BB}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [50a036a8b8d256e00d2c66335da8d828]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{4BA977DC-68DB-4F84-A30E-D499A04490BB}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [9957e9f57911b581fb3e3d5cf70ec53b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{50DCBAFD-BBBD-4A48-A0A5-04BAAE53C9FA}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [9d533ba3870373c3ca1beaaabd48926e]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{50DCBAFD-BBBD-4A48-A0A5-04BAAE53C9FA}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [20d0e8f6dab0ee4837fc9200877e09f7]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{50DCBAFD-BBBD-4A48-A0A5-04BAAE53C9FA}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [5a9621bdff8b7abc81b8089130d523dd]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{50DCBAFD-BBBD-4A48-A0A5-04BAAE53C9FA}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [4ea26c727b0f48eed3667a1ffc0917e9]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [6888e0fe602a75c1865f454f768fd62a]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a&site=shyosie&q={searchTerms}, In Quarantäne, [c62a6579e5a593a3f0438e0424e13bc5]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a&site=shyosie&q={searchTerms}, In Quarantäne, [15db22bc6d1d34029c977c1661a44cb4]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [f9f776681278023414d15f35689dcf31]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [af41fde1eaa0979f1f147022b84d669a]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [a44c845a8406181e93a6b6e31de845bb]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{548A6A8F-6FFD-4319-BE49-0F1385149B7E}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [935d8a54adddea4cc871dbbec4418b75]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{56ABDC89-A3BF-4E52-AED1-A8C3C67F7E26}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [05eb6975c5c5f640f9ec9df708fd32ce]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{56ABDC89-A3BF-4E52-AED1-A8C3C67F7E26}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [7d7310ced1b9171fa291c6cc5aab5fa1]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{56ABDC89-A3BF-4E52-AED1-A8C3C67F7E26}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [0ce44a940981023441f8079240c5728e]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{56ABDC89-A3BF-4E52-AED1-A8C3C67F7E26}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [7977b9252367c0761227128719ecfa06]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5AE085F2-CD0C-4726-AD6B-1DA1DF6EEFE0}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [658b4d91b2d81d198e576b29e81d6a96]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5AE085F2-CD0C-4726-AD6B-1DA1DF6EEFE0}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [2ec24a94eaa0d066151e553d9372db25]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5AE085F2-CD0C-4726-AD6B-1DA1DF6EEFE0}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [6f81528c0f7b93a311284653e91ce61a]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5AE085F2-CD0C-4726-AD6B-1DA1DF6EEFE0}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [4ca45f7f4545023412273267b84d8c74]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [ea066e70a6e4162003e2cfc56e97af51]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [e30de1fd51397fb7c1726a289273bc44]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [9e52bf1f8802db5b072c5141ab5a8e72]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [2cc4ebf3bbcf3ef890559301e421cd33]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [e20e7668d3b73501f43ffb9762a3d62a]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [529e07d79bef6fc7e752c7d200051ee2]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5B867C18-8D18-43EA-812B-E7A2A48BF9A0}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [c32d55891b6fab8b7fba9bfe47bee61a]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [866a6678b1d958de697c563ed62faa56]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [5898627c7e0c1c1abb786e246c99b64a]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [e60a08d6fe8c162071c2464c2dd8817f]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [58980ed02f5b90a6c322138112f38c74]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [be327965a5e566d0d95a4a480bfa42be]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [8f616f6f46447abc67d29cfd56af738d]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5D29C4B6-0E8A-4610-AC41-145B48D0CE07}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [8b65439b4f3b86b00d2c39608f76956b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{61912F67-A3C5-444A-A22E-A32FACC8279D}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [00f07f5f9ded88ae776ecbc922e304fc]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{61912F67-A3C5-444A-A22E-A32FACC8279D}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [e808548a05851a1c80b34949b94c18e8]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{61912F67-A3C5-444A-A22E-A32FACC8279D}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [42ae30aef3971b1bd7626c2d51b48d73]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{61912F67-A3C5-444A-A22E-A32FACC8279D}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [5a961cc2acde86b088b1ff9a669fbf41]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{64724F2F-7BB6-4B8A-8FA7-699B7B8B700A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [0ce44995b5d5e55128bdd9bb6f96827e]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{64724F2F-7BB6-4B8A-8FA7-699B7B8B700A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [19d7548a187213234ee5afe3e71e10f0]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{64724F2F-7BB6-4B8A-8FA7-699B7B8B700A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [9060518dd1b9201692a75a3fdd28e31d]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{64724F2F-7BB6-4B8A-8FA7-699B7B8B700A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e30d429c1674c86e7cbd178214f1bb45]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [bb35439b7515cf67b431583c40c5f709]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [28c8bd21bccea98db87bd3bf2fd6ca36]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [5997588698f296a08ba8a3efc342ce32]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [34bc7a6462289d997f66a9ebfe07c937]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [10e024badcae37ffdb58890931d402fe]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [cb250ad4870374c251e84455986de917]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{65E04B1F-5216-40CA-B553-561604A36EB0}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [08e81bc3aedc8ea863d62178db2a629e]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [ce22c31b5238ae8836af880c21e41ee2]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [44ac429c6822dc5ad95afc964db80ef2]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [d719fce294f6171f5bd80e84a56025db]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [c32d08d692f8092d0dd83d5713f254ac]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [d917da04ed9dea4c59da761c9471c739]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e60ada04e1a95dd9a0999ffa5ca9817f]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{66B11FB2-061E-4C2C-AAAC-67D3348BB1F3}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [13dd0fcffa90e254d7621a7f0500ec14]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{771F458C-6AD2-45CA-8DFE-C5FCCC46E843}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [e7090ed0ff8b3204f7eedfb5f312bf41]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{771F458C-6AD2-45CA-8DFE-C5FCCC46E843}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [04ec15c92862d0669d96078b55b006fa]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{771F458C-6AD2-45CA-8DFE-C5FCCC46E843}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [f8f824ba206aa2940a2f5247c5406b95]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{771F458C-6AD2-45CA-8DFE-C5FCCC46E843}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [836d0bd3ec9e51e5ef4a78212bda837d]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DA867DD-7B5E-417D-BAB1-727A4CBA842A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [3db310ce286265d1f1f497fdf114748c]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DA867DD-7B5E-417D-BAB1-727A4CBA842A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [e10f1ac43456d85e3cf7c7cbb45132ce]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DA867DD-7B5E-417D-BAB1-727A4CBA842A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [955b3da19ded3ff72b0e0099b94cfc04]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DA867DD-7B5E-417D-BAB1-727A4CBA842A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [00f0429c622860d6e6535148ef1658a8]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [747c13cbbdcdc76f90552b69858048b8]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [aa46f9e51c6ede587eb58d05bd48d12f]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [a64ae4faacde3df9290a474b03025fa1]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|FaviconURL, http://www-searching.com/favicon.ico, In Quarantäne, [9c545688177349ed40f39cf6aa5bc937]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [1ad6a9351b6ff34387ac227007fee31d]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [f5fb7c62fa90a0961e1b7326af568b75]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [8e62efeffc8ed066fd3cf0a940c5728e]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{826DE994-6CF5-45E7-A9C9-6FB3871981B4}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [28c8d10d17732f07cb1a553fbb4aa55b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{82EC5833-23FD-4BFF-A3B9-31CCE9BB681D}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [02eefae40d7d8da9e6ff583c3acb2bd5]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{82EC5833-23FD-4BFF-A3B9-31CCE9BB681D}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [f2feecf21e6c64d2f93a5a386b9a966a]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{82EC5833-23FD-4BFF-A3B9-31CCE9BB681D}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [9f518e502a600e28dc5d12877d88ed13]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{82EC5833-23FD-4BFF-A3B9-31CCE9BB681D}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [5d9308d6a3e772c4e752b9e0dd28af51]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [06ea5688c2c89d993ca9ddb751b402fe]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [47a9d50974165bdb2e05cac8689dd729]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [2ac609d52268a0961c171181bb4a9967]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|FaviconURL, http://www-searching.com/favicon.ico, In Quarantäne, [b13fd7077e0c95a1ae85167cf80d3ec2]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [5a96f6e8a3e769cddd561e7422e39c64]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [eb05419d078392a442f75a3f6c996d93]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8663464D-53F7-48F5-8680-424C136E266E}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [03ed29b50a80dd599c9db7e2f411b44c]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{87291DD9-E49E-448A-BC74-FB8376B49B9F}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [f9f77f5f8a0089ad25c0ddb745c018e8]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{87291DD9-E49E-448A-BC74-FB8376B49B9F}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [8c64637b008a81b5b47feea442c3cf31]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{87291DD9-E49E-448A-BC74-FB8376B49B9F}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [3bb59a448208fd393900aaef5da802fe]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{87291DD9-E49E-448A-BC74-FB8376B49B9F}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [af414f8f2763d561b3863a5f14f15ea2]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [519fe8f61773989e4c994b4964a140c0]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [d31d657938529c9ae74cc7cbc342ab55]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [cf217a641278d85e46eda5ed5ca911ef]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [30c0637be4a6ce6801e47b193dc8ed13]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [816f56881f6bab8bfb387b1721e4d22e]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [24cc24bae3a7d85ea2976a2f2bda5ea2]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8D12FB26-EC19-4B72-A556-92499953C8B2}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [9e5214ca0288989e6bce742532d305fb]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A2E45484-3709-4722-BB1E-69A4A18C432E}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [25cbfce2d9b12610796c6034c243619f]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A2E45484-3709-4722-BB1E-69A4A18C432E}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [22ce58861971072f5dd66d2543c2f808]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A2E45484-3709-4722-BB1E-69A4A18C432E}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e20e706e47431c1a0e2b9702b64f24dc]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A2E45484-3709-4722-BB1E-69A4A18C432E}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [27c98b53d4b6181e73c68e0b20e51de3]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AC5705F9-B6C2-4FAA-8B10-C8CF4501696E}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [c42c6c72f5956ec8677e375d9f66d030]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AC5705F9-B6C2-4FAA-8B10-C8CF4501696E}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [fbf5a539f2984aec8ba82d65e91c768a]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AC5705F9-B6C2-4FAA-8B10-C8CF4501696E}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [2bc525b9c4c60a2c54e5f2a727debc44]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AC5705F9-B6C2-4FAA-8B10-C8CF4501696E}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [06ea37a7e1a9fd39f643e5b4897c7a86]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0108BC3-325D-48BF-A10D-644078A06C74}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [846cd70721697cba7c691c78c5401de3]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0108BC3-325D-48BF-A10D-644078A06C74}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [eb0539a5f1996bcb0132385a996cec14]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0108BC3-325D-48BF-A10D-644078A06C74}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e907b925f7934de966d36d2c1ee720e0]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B0108BC3-325D-48BF-A10D-644078A06C74}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [b43c00de2763310539000f8a3dc837c9]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B01364E5-11EE-4054-8249-C90F09010C2A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [47a90cd26f1b181ea73e890b51b4867a]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B01364E5-11EE-4054-8249-C90F09010C2A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [21cf16c82e5c48ee3ef58d050302b44c]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B01364E5-11EE-4054-8249-C90F09010C2A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [5c949549bfcb80b62f0a0c8d6a9b4ab6]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B01364E5-11EE-4054-8249-C90F09010C2A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [45ab11cda6e444f25edbc2d737cec53b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B1C998E3-DFB5-42DC-8525-610E0D265E35}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [30c0cb131e6cb2848d58494b27de738d]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B1C998E3-DFB5-42DC-8525-610E0D265E35}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [37b96d7109810c2a1023583a0302926e]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B1C998E3-DFB5-42DC-8525-610E0D265E35}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [8f617668fa9054e2d762efaad92cc23e]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B1C998E3-DFB5-42DC-8525-610E0D265E35}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [28c8ad314c3e64d2db5e4a4fbd48cf31]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B35B71B0-E14D-425E-BC39-C2429E38977D}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [f9f7f6e89ceeb87e25c0dbb9da2b47b9]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B35B71B0-E14D-425E-BC39-C2429E38977D}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [c0300fcff397c27442f1058d0cf9b749]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B35B71B0-E14D-425E-BC39-C2429E38977D}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [a34d944a4a4060d6fc3d534663a2fe02]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B35B71B0-E14D-425E-BC39-C2429E38977D}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [41affae4f3973ff73dfce7b26a9b09f7]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [618fca141d6db87ecd18f3a11ce96a96]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|TopResultURL, http://www-searching.com/search.aspx?s=F6Tztutdk0003,798f7cc9-eab1-4be8-a816-193d9c2fb626&site=shyosie&q={searchTerms}, In Quarantäne, [ea06edf17317d6607cb7533fc540669a]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F6Tztutdk0003,798f7cc9-eab1-4be8-a816-193d9c2fb626&site=shyosie&q={searchTerms}, In Quarantäne, [07e94797c3c776c070c3c0d2f312c13f]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [44acebf3c7c357dffde8f99b43c28c74]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [f3fdc816f793e551de555b3764a17b85]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [2dc302dc1773cd69ca6fa0f9a46108f8]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B4967CED-1BD6-4894-97D7-D51867CAB8D1}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [2dc35d810d7d5bdb56e3dabf6d9857a9]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [22cebe202a6059dd10d56a2a1de819e7]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [2ac6508ee4a6e2549d96eca69b6a3cc4]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [5e92c31bf892f83e240feca6f5107e82]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [945cdd01aedca98d3baa60340bfa10f0]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [826e1ac46327bc7a64cf3e544abbad53]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [f1fffae4fa9034022d0c6a2f53b251af]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B5A44E9F-EFED-4E6D-934F-3B62DFD2B457}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [7977a5391b6fbb7b36034c4dc3421fe1]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B7DAC08E-50F7-45F6-8652-58563EDA38C7}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [b33d28b6d6b4d561687d4c489471ec14]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B968CFAC-3A02-433D-9234-A465B7EFD6BD}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [777901ddeb9f58deeef77b1920e5c33d]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B968CFAC-3A02-433D-9234-A465B7EFD6BD}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [aa46419d45456fc74ae9efa3838205fb]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B968CFAC-3A02-433D-9234-A465B7EFD6BD}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [a34d35a954366fc7d4655643996caf51]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{B968CFAC-3A02-433D-9234-A465B7EFD6BD}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [866a924cc9c1e65083b699005ea73ac6]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA0FCB1F-7BBB-4380-AF52-3F1E4C6D8DDE}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [04ec6e7008823afc8263563e8e776c94]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA0FCB1F-7BBB-4380-AF52-3F1E4C6D8DDE}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [c03066784a4045f1f73c1280f70e14ec]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA0FCB1F-7BBB-4380-AF52-3F1E4C6D8DDE}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [6e82a7376228cb6bfc3da6f340c50ff1]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA0FCB1F-7BBB-4380-AF52-3F1E4C6D8DDE}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [22cec519e5a541f50e2b1386f60f7789]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BD2D2F9A-9C45-496A-9DCA-0F9A26EAD548}|DisplayName, mystartsearch, In Quarantäne, [9060c01e8901dd59bd284d47b84d8b75]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BD2D2F9A-9C45-496A-9DCA-0F9A26EAD548}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [d41c805ed8b2f54111d43b59e5207987]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BD2D2F9A-9C45-496A-9DCA-0F9A26EAD548}|TopResultURL, http://www.mystartsearch.com/web/?type=ds&ts=1435397794&z=7a854140ecb5168ca92961bg3z3caw3cet5m8m0t6o&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, In Quarantäne, [e808e8f6fd8d3105cf16f79d2cd99967]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [d21e21bd0a8082b47f66b0e4a46132ce]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [6c84de006624f6407db69ef436cf13ed]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [c32db42ae5a5bd795dd6b9d90ff601ff]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [43ad10ce4347072f1fc6c9cbde27bf41]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [757b01dd3e4ccf6739fa662c19ec7b85]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [20d025b94a400630bf7a4c4d39cc40c0]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C18821F5-CEB2-4A4D-88C5-ADA0DCB9A98E}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [25cbd40acac07fb7a5947d1c2fd68f71]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [2dc3e4fa9af03bfb8f560f8516efb54b]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [708035a9a9e1ac8a969deda5e61fb749]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [4ba54c92ccbe5dd990a3b0e218ed2ad6]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [07e9efefb5d577bfcc19167e8b7ad729]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [6a86eef03b4ff4421a19751df0156a96]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [46aa4896e8a2be78e6534c4d1ce9b34d]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C3708A8C-EE87-41AF-956E-4466422DF08C}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [3fb16a74b2d8b581b9803069778ea060]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C721DCB1-33E3-470D-A292-8524D668B956}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [c9270ad43f4bc86e895c8f05778e9f61]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C721DCB1-33E3-470D-A292-8524D668B956}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [c42ce7f7107ae05687ac9bf78c7928d8]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C721DCB1-33E3-470D-A292-8524D668B956}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [816f449a93f72c0aa297c9d0897c936d]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C721DCB1-33E3-470D-A292-8524D668B956}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [16dae5f98cfec96dfa3fcfca14f1758b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [f000d905bbcfb87eeef78014e61f8977]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [ad438a54761459dda98ac8ca689d05fb]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [d0200ad41674ec4a9a99731fe81d9967]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [42ae4f8f6c1e1b1bfee7256fb253e51b]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [856b20beeb9fa690a48f8012937222de]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [b23e895585057cba01384851877e5aa6]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CE32F092-440D-4154-A317-BAEB0521F439}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [d31dc9155d2d2b0bf5442772be47f907]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [599722bccac0d660ba2ba2f2679e01ff]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [3eb23ba3d9b106302c07c2d0a65f8b75]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [be3285597b0f54e2c96ad2c04cb958a8]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [0ee26e70cdbd58dec2238e06f4110cf4]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [4ea237a73753d06678bbf89af90c857b]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [c42cc9150684e1557ebb4059986d956b]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFEA619E-963E-43C8-B42B-B502CF513FD7}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [4ea286583555d561e950cacf897c659b]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [fdf3edf11b6f1125f5f0049032d3b14f]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [757b736b6f1b93a30f24c0d26b9ab44c]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [a64acd11cfbbec4a9e95860c0ff68977]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [3ab6f7e72565c6700adbc8ccde2744bc]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [fff1d5097f0b83b3d162a9e9c4410cf4]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [1dd3ecf27e0c85b16bce3564a85d54ac]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D55F705B-4526-4DAC-95DD-6F0F90321CB7}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [da16c5198dfd06303504a2f708fd8779]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D8459AB5-9DC9-4671-B362-1DD8D32EBDF2}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [26ca835bbfcb3cfa24c1aaea867f53ad]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D8459AB5-9DC9-4671-B362-1DD8D32EBDF2}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [06ea48965b2f77bf4de6bdd5828307f9]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D8459AB5-9DC9-4671-B362-1DD8D32EBDF2}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [fcf46f6fb0dac76fc772d6c329dcd828]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D8459AB5-9DC9-4671-B362-1DD8D32EBDF2}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [e8081bc3abdf0531cd6c8910689d9c64]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D855934B-E6F2-4C45-9917-8A9D86CCB636}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [7977459934562c0ac520b9dbe71e2fd1]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D855934B-E6F2-4C45-9917-8A9D86CCB636}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [a84886588a001026c07309895baa9967]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D855934B-E6F2-4C45-9917-8A9D86CCB636}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [8f619c427e0ce1552415aeebb84dc937]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{D855934B-E6F2-4C45-9917-8A9D86CCB636}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [935d12cc6d1de15556e37821b74e31cf]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [658b8d51b6d449ed469ffb9930d5c23e]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [fdf3449ac5c5cd69a78c7121986df808]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [5d93ac32890185b1fc3790024bba2dd3]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [13dd0dd1cac00531cb1a2e662bda7a86]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [fdf3914dfe8cad89ce658e0419ec8977]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [c030bc22b2d8043264d5b0e9986d26da]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E695FA2D-6166-416D-BB80-A46B4F754A6A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [f1ff914d533796a061d83861a26334cc]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [e10fd5094a4074c25293534151b42ad6]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EC5D4994-C3EC-4411-9F5E-83CB4DD233C9}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [16daecf20d7d5cda4b9a4a4a54b19f61]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EC5D4994-C3EC-4411-9F5E-83CB4DD233C9}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [27c9548afb8fa4920dd8eca8867fc13f]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EC5D4994-C3EC-4411-9F5E-83CB4DD233C9}|TopResultURL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1435397898&type=default&q={searchTerms}, In Quarantäne, [39b7b42a52386fc724c1a6eeca3b0af6]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [bf31edf1f793013514d1eca87b8ad22e]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [c92700de39517bbb1f14830ffc09e917]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [15dbb42a99f1cd69d45f3e5438cd8d73]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [05eba03e09810c2a7570b6def70ef60a]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [6987da046426a294cb68d9b95da8c937]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [af41cb13b2d85ed872c7c9d090755aa6]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{F30F2ACB-4D13-449D-8BF1-5CE9F88D575A}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [737d5b830b7f70c6013802978a7b18e8]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|URL, http://www.mystartsearch.com/web/?utm_source=b&utm_medium=cmi&utm_campaign=install_ie&utm_content=ds&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&ts=1436202671&type=default&q={searchTerms}, In Quarantäne, [945cb8264446cb6bf9ec5f35aa5bf60a]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|TopResultURL, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [e709a836b5d524122c070c8626df2ed2]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|TopResultURLFallback, http://www-searching.com/search.aspx?s=F73ztutdk0003,624d526a-354d-469f-b72a-2b79ad83868a,&q={searchTerms}, In Quarantäne, [f4fcfce202883df91c172270d43153ad]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|FaviconURL, http://www.mystartsearch.com//favicon.ico, In Quarantäne, [26cad9053159072f1bca742048bd0ef2]
PUP.Optional.Searching.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|FaviconURLFallback, http://www-searching.com/favicon.ico, In Quarantäne, [925eaa3421691a1c92a1f59d966f8d73]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|SuggestionsURL, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [7878f8e63852a5910930a5f463a2d030]
PUP.Optional.SearchModule.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{FA9436DD-5DFF-44A4-B872-9B94C4230F49}|SuggestionsURLFallback, http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}, In Quarantäne, [7a760cd2ccbe0b2b8aaf940508fdfd03]
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\OPTIMIZER PRO|AdsBuyNowURL, http://www.safeshopgate.com/r?s=121002094&g=9351B570-6B3B-4BFD-9343-7208BD620F73, In Quarantäne, [28c8627cfb8fce68d28acad10401f10f]
         
__________________
__________________

Alt 14.07.2015, 02:08   #19
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Code:
ATTFilter
Registrierungsdaten: 15
PUP.Optional.TomorrowGames.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, c:\programdata\tomorrowgames\tomorrowgames32.dll c:\program files c:\program files c:\programdata\lolliscan\lolliscan32.dll , Gut: (), Schlecht: (c:\programdata\tomorrowgames\tomorrowgames32.dll),Ersetzt,[2bc528b6eaa0e45291e8cba6f70bf709]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1435397794&z=7a854140ecb5168ca92961bg3z3caw3cet5m8m0t6o&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S, Gut: (iexplore.exe), Schlecht: (C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1435397794&z=7a854140ecb5168ca92961bg3z3caw3cet5m8m0t6o&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S),Ersetzt,[9c5417c70d7d0a2c4b013715d82e2bd5]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}),Ersetzt,[1ad601dd6a20d462ccfc0645947258a8]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=hp&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/?type=hp&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S),Ersetzt,[ad43a13deb9fbe78cefa3813b1554cb4]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}),Ersetzt,[d917db0375155dd9785066e5e32306fa]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[f3fdc915ef9bfd399d14c097e1251ae6]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1435397794&z=7a854140ecb5168ca92961bg3z3caw3cet5m8m0t6o&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S, Gut: (iexplore.exe), Schlecht: (C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1435397794&z=7a854140ecb5168ca92961bg3z3caw3cet5m8m0t6o&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S),Ersetzt,[39b7dc02ef9ba78f76d685c7d92da15f]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}),Ersetzt,[5f91627c2961a98d7355d87358ae35cb]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=hp&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/?type=hp&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S),Ersetzt,[866a0bd3d5b5f1456c5cc388af5747b9]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/web/?type=ds&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}),Ersetzt,[de12a737f89264d23e8a63e825e1ed13]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[1ed2f0ee5c2e9a9c575aea6d09fdce32]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=hp&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/?type=hp&ts=1436202508&z=d2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S),Ersetzt,[13dd32ac256592a49336fd4e3accf709]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type=dspp&ts=1435397882&z=62d5d6fad0de877e585725fg3z2cdw4cet3m0b8b4e&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/web/?type=dspp&ts=1435397882&z=62d5d6fad0de877e585725fg3z2cdw4cet3m0b8b4e&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}),Ersetzt,[6090756905858bab3a8f3813da2cf808]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type=dspp&ts=1435397882&z=62d5d6fad0de877e585725fg3z2cdw4cet3m0b8b4e&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}, Gut: (www.google.com), Schlecht: (http://www.mystartsearch.com/web/?type=dspp&ts=1435397882&z=62d5d6fad0de877e585725fg3z2cdw4cet3m0b8b4e&from=cmi&uid=TOSHIBAXMQ01ABD075_34OCSBM2SXX34OCSBM2S&q={searchTerms}),Ersetzt,[d31d449a57336ec80dbcf6554fb747b9]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|First Home Page, http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=httpSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]AGut: (www.google.com)FGut: (www.google.com)Fwww.mystartsearch.comGut: (www.google.com)FSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]FtypeSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]Dhp%26tsSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]D1436202508%26zSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26fromSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]Dcmi%26uidSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=httpSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]AGut: (www.google.com)FGut: (www.google.com)FwwwGut: (www.google.com)Dsearching.comGut: (www.google.com)Fsearch.aspxSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]FsSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]DF73ztutdk0003Gut: (www.google.com)C624d526aGut: (www.google.com)D354dGut: (www.google.com)D469fGut: (www.google.com)Db72aGut: (www.google.com)D2b79ad83868aGut: (www.google.com)C%26qSchlecht: (http://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=MSE&Tid=000328B0&OHP=http%3A%2F%2Fwww.mystartsearch.com%2F%3Ftype%3Dhp%26ts%3D1436202508%26z%3Dd2a9fb900333eec085f8c3fg2z1cfq3o1edocw9ecc%26from%3Dcmi%26uid%3DTOSHIBAXMQ01ABD075%5F34OCSBM2SXX34OCSBM2S&OSP=http%3A%2F%2Fwww%2Dsearching.com%2Fsearch.aspx%3Fs%3DF73ztutdk0003%2C624d526a%2D354d%2D469f%2Db72a%2D2b79ad83868a%2C%26q%3D%7BsearchTerms%7D),Ersetzt,[1bd527b77b0f45f19930ae9dee184bb5]D%7BsearchTerms%7D, %4, %5

Ordner: 337
PUP.Optional.CrossRider.A, C:\Program Files (x86)\BrowserV30.06, Löschen bei Neustart, [34bc07d73159b581b758aa578c78f20e], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07, Löschen bei Neustart, [6f81b727a6e4320431de669bc53f768a], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Ge-Force, Löschen bei Neustart, [41afd7076b1f78be5db2bc450400827e], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Object Browser, Löschen bei Neustart, [e10fa13d692184b29b7415ec8c781ae6], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb, Löschen bei Neustart, [e40c5c8253370036957b20e537cd07f9], 
PUP.Optional.WinKit.A, C:\Users\Lucas\AppData\Roaming\WinKit, In Quarantäne, [00f0dfff3d4db581aec44fc2798bcb35], 
PUP.Optional.ASPackage.A, C:\Users\Lucas\AppData\Roaming\ASPackage, In Quarantäne, [1dd324ba3357162035e6090a0ef6b54b], 
PUP.Optional.ASPackage.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage, In Quarantäne, [836d528c2367b581af6d24efd034ea16], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.Goobzo, C:\ProgramData\SearchModule, In Quarantäne, [6e82e1fd107a023442a80c19996b23dd], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro, Löschen bei Neustart, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver, Löschen bei Neustart, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069, Löschen bei Neustart, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}, Löschen bei Neustart, [4ca4b92592f8da5c85b243503dc849b7], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF, Löschen bei Neustart, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432112989-11E3-B710-42083202C0FF, In Quarantäne, [965a3da18bffbc7a5ae7c1d225e0e21e], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.SuperOptimizer.A, C:\ProgramData\{254217e2-f341-d2cd-2542-217e2f345f8b}, In Quarantäne, [e40cf8e68dfd221416cf475133d2db25], 
PUP.Optional.OptimizerPro.A, C:\Users\Lucas\Documents\Optimizer Pro, In Quarantäne, [1bd5a13dc5c5df57c496900b42c333cd], 
PUP.Optional.BubbleSound.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0, In Quarantäne, [c927776716740630871908948b7aa858], 
PUP.Optional.Convert, C:\Users\Lucas\AppData\Roaming\PDFConvert, In Quarantäne, [5f919e40355570c665f2f7a77b8a2fd1], 
PUP.Optional.DesktopSearch.A, C:\ProgramData\DesktopSearch, Löschen bei Neustart, [f1ff28b6abdf5adcbc7d405f0500c040], 
PUP.Optional.DeskTopSearch.A, C:\Users\Lucas\AppData\Local\DesktopSearch, In Quarantäne, [b13fd40a286284b2ae673967dc29b749], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse\1.0.1.0, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Vroifhit\1.0.1.0, In Quarantäne, [5799647a39518ea8d6c3425ed82d19e7], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Vroifhit, In Quarantäne, [5799647a39518ea8d6c3425ed82d19e7], 
PUP.Optional.DeskBar.A, C:\Users\Lucas\AppData\Local\DeskBar, In Quarantäne, [c729657965258bab1ce53d64818448b8], 
PUP.Optional.DeskBar.A, C:\Users\Lucas\AppData\Local\DeskBar\2.0.1.1625, In Quarantäne, [c729657965258bab1ce53d64818448b8], 
PUP.Optional.PullUpdate.A, C:\ProgramData\Radio, In Quarantäne, [36ba13cbafdbdb5b76b1dbc6b3522ad6], 
PUP.Optional.DesktopSearch.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search, In Quarantäne, [e907c5195b2f64d23b11119059ac4eb2], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, In Quarantäne, [24ccb12d0486ac8a3949d20ce1226d93], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [24ccb12d0486ac8a3949d20ce1226d93], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{5F2635EE-396C-4F94-913F-A1636F53F1BF}, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.197592, In Quarantäne, [846cf7e795f59b9b2d92825d9b68946c], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.216344, In Quarantäne, [b33d6c72d4b61f17437c4d92bf44cc34], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.243306, In Quarantäne, [b73976681c6eee48516e8e5140c332ce], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.285380, In Quarantäne, [816f00deb6d40f27427d419edc277a86], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.301755, In Quarantäne, [be323ca2167454e2ba05885743c038c8], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.317450, In Quarantäne, [a050c31bfc8ee45209b6cb1411f27888], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.333724, In Quarantäne, [bf313f9f1a7096a0a51a914e55aeeb15], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.335467, In Quarantäne, [e40cfce251392511dde218c78a7945bb], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.365270, In Quarantäne, [18d84d9196f44ceab20dc31c4fb46b95], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.372103, In Quarantäne, [47a98e505d2d0432912e736c60a3b34d], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.399206, In Quarantäne, [549cecf2ee9ccd690bb4e7f87d861be5], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.407792, In Quarantäne, [8e62c21c9febdc5aecd3fee153b0718f], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.46373, In Quarantäne, [559b449a46445ed8caf53ca3ab58bb45], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.6686, In Quarantäne, [f6fa3ca27d0dff37e5da6e710af952ae], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.89442, In Quarantäne, [f9f7d30b454548eead126d72ed16e11f], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, Löschen bei Neustart, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.EyePerform.A, C:\Users\Lucas\AppData\Local\Temp\eye perform, In Quarantäne, [36ba518d0b7f53e3209a16d4c93afc04], 
PUP.Optional.GamesDesktop.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP, In Quarantäne, [ee02eef01773c0763f47f2fdf40fa858], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014, Löschen bei Neustart, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\Download, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\gmsd_de_005010014, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\gmsd_de_005010014\1.20, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010015, In Quarantäne, [0ee286587b0fca6c1b6c4da255aee11f], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010015\gmsd_de_005010015, In Quarantäne, [0ee286587b0fca6c1b6c4da255aee11f], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010015\gmsd_de_005010015\1.20, In Quarantäne, [0ee286587b0fca6c1b6c4da255aee11f], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010017, In Quarantäne, [915f97475337b77f295eb33cee158f71], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010017\gmsd_de_005010017, In Quarantäne, [915f97475337b77f295eb33cee158f71], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010017\gmsd_de_005010017\1.20, In Quarantäne, [915f97475337b77f295eb33cee158f71], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010018, In Quarantäne, [68882ab41a70bb7bb4d3c728a85b7789], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010018\gmsd_de_005010018, In Quarantäne, [68882ab41a70bb7bb4d3c728a85b7789], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010018\gmsd_de_005010018\1.20, In Quarantäne, [68882ab41a70bb7bb4d3c728a85b7789], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010020, In Quarantäne, [569a09d52e5c1b1b3750f7f85ba853ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010020\gmsd_de_005010020, In Quarantäne, [569a09d52e5c1b1b3750f7f85ba853ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010020\gmsd_de_005010020\1.20, In Quarantäne, [569a09d52e5c1b1b3750f7f85ba853ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010022, In Quarantäne, [e30d04da2a60cf67bdcaa14e16edf20e], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010022\gmsd_de_005010022, In Quarantäne, [e30d04da2a60cf67bdcaa14e16edf20e], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010022\gmsd_de_005010022\1.20, In Quarantäne, [e30d04da2a60cf67bdcaa14e16edf20e], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010023, In Quarantäne, [02ee4599b4d604324344f6f9b74cee12], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010023\gmsd_de_005010023, In Quarantäne, [02ee4599b4d604324344f6f9b74cee12], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010023\gmsd_de_005010023\1.20, In Quarantäne, [02ee4599b4d604324344f6f9b74cee12], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010024, Löschen bei Neustart, [cd23419dc6c494a2dcab737c60a3dc24], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010024\gmsd_de_005010024, In Quarantäne, [cd23419dc6c494a2dcab737c60a3dc24], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010024\gmsd_de_005010024\1.20, In Quarantäne, [cd23419dc6c494a2dcab737c60a3dc24], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010014, In Quarantäne, [886805d97515e2545533c728a26105fb], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010015, In Quarantäne, [24cc7b63aae0a4926a1ee6098f74c23e], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010017, In Quarantäne, [0ce45a84890138fed8b0618e768dfe02], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010018, In Quarantäne, [04ec5b83b1d95bdb8cfc8c635ea5ad53], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010020, In Quarantäne, [b43cc519e4a66cca4444d9166a99f40c], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010022, In Quarantäne, [f5fb0fcfff8ba78fcabe21cec53ea65a], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010023, In Quarantäne, [15dbf1edbecc7eb893f599566d96659b], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010024, Löschen bei Neustart, [6f81bd219af0c96daade579837cc659b], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [7f71c519eaa00e28d7fe1dd620e3fe02], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [7f71c519eaa00e28d7fe1dd620e3fe02], 
PUP.Optional.AdTech.A, C:\Users\Lucas\AppData\Roaming\pdfie, In Quarantäne, [6789ebf3c7c3d85e67d582729a69847c], 
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro, In Quarantäne, [23cdb22cbad0f442793e48b1709308f8], 
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro\JsDriver, In Quarantäne, [23cdb22cbad0f442793e48b1709308f8], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup, In Quarantäne, [638d6777afdb8ea83b9159a0ad564fb1], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\installer, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\language, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\logs, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\scan_results, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\swf, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.HardCase.A, C:\Users\Lucas\AppData\Local\Temp\Hard Case, In Quarantäne, [6b85e9f5bad0a294db095d9c4db60af6], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Extensions, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\PepperFlash, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\VisualElements, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases\https_de.aion.gameforge.com_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases\http_de.tera.gameforge.com_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\bg, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ca-ES, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\cs, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\da, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\de, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\el, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\en, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\es, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\eu-ES, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\fi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\fr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\it, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ja, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ko, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\nl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\no, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\pl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\pt-BR, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\pt-PT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ro, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ru, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\sl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\sv, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\tr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\zh-Hans, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\zh-Hant, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ar, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\bg, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ca, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\cs, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\da, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\de, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\el, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\en, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\en_GB, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\es, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\es_419, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\et, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\fi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\fil, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\fr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\he, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\hi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\hr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\hu, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\id, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\it, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ja, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ko, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\lt, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\lv, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\nb, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\nl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\pl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\pt_BR, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\pt_PT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ro, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ru, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sk, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sl, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sv, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\th, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\tr, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\uk, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\vi, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\zh_CN, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\zh_TW, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_metadata, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIcons, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIconsOld, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\QPJLZQCU, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\cdncache-a.akamaihd.net, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\cdncache-a.akamaihd.net\items, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\cdncache-a.akamaihd.net\items\e6a00, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\cdncache-a.akamaihd.net\items\e6a00\storage.swf, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#partners.cmptch.com, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#www.ajaxcdn.org, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\mpsnare.iesnare.com, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\partners.cmptch.com, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\partners.cmptch.com\flash, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\partners.cmptch.com\flash\ga.swf, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\partners.cmptch.com\flash\ut.swf, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\vox-static.liverail.com, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\www.ajaxcdn.org, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\www.ajaxcdn.org\swf.swf, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse, In Quarantäne, [708000de11790b2b42bbaf4a09fa827e], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14, Löschen bei Neustart, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Service, Löschen bei Neustart, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.MagicBall.A, C:\Users\Lucas\AppData\Local\Temp\Magic Ball, In Quarantäne, [6b85b32bd5b54fe741e8fcff28db3ac6], 
PUP.Optional.CheckedList.A, C:\Program Files (x86)\Checked List, In Quarantäne, [46aa5a84e5a5db5bef6fc833748f8878], 
PUP.Optional.CheckedList.A, C:\Users\Lucas\AppData\Local\Temp\Checked List, In Quarantäne, [bf31cf0fd9b1f442bca340bbc43f7c84], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound, Löschen bei Neustart, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\config, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.AnyProtect.A, C:\Program Files (x86)\AnyProtectEx, In Quarantäne, [c12f9648a3e739fd399fed1024df29d7], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\image, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\en-US, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-419, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-ES, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-BE, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CA, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CH, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-FR, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-LU, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-CH, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-IT, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pl, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt-BR, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru-MO, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\tr-TR, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\vi-VI, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-CN, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-TW, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19, Löschen bei Neustart, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Service, Löschen bei Neustart, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Update, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames, Löschen bei Neustart, [ee028b53dbaf67cfe940817d41c2956b], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\dat, Löschen bei Neustart, [45abb9251e6cd363a0049bfbe620817f], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq, Löschen bei Neustart, [45abb9251e6cd363a0049bfbe620817f],
         
__________________
Beste Grüße,

Kuhlambo12

Alt 14.07.2015, 02:09   #20
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Code:
ATTFilter
Dateien: 1411
PUP.Optional.Infonaut.A, C:\WINDOWS\SYSTEM32\drivers\innfd_1_10_0_14.sys, Löschen bei Neustart, [9a3a331881a112551748860edd857a26], 
PUP.Optional.WordShark.A, C:\WINDOWS\SYSTEM32\drivers\wsfd_1_10_0_19.sys, Löschen bei Neustart, [724a427bfbbd6bd9f202ad029bc777bb], 
PUP.Optional.EyePerform.A, C:\WINDOWS\SYSTEM32\drivers\{241c48c5-f3a9-4ff5-98b0-c41988c34fff}Gw64.sys, Löschen bei Neustart, [9d2ea93a95b81b91cd0ad906ddc3eb6c], 
PUP.Optional.WebTInst.A, C:\Windows\System32\drivers\MSFT_KERNEL_WEBTINSTMKTN84_01009.WDF, Löschen bei Neustart, , 
PUP.Optional.XTab.A, C:\Program Files (x86)\MiuiTab\PROTECTSERVICE.EXE, Löschen bei Neustart, [ba36d80602886dc9b9abb06a47bb5fa1], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe, Löschen bei Neustart, [747cd20c5d2d152124a43b5839cd7f81], 
Trojan.Downloader, C:\Windows\mutk.exe, Löschen bei Neustart, [a24e29b53753ff37de380d68ee14e31d], 
Trojan.Agent.SV, C:\Users\Lucas\AppData\Local\Temp\svhost.exe, Löschen bei Neustart, [13ddd70774161d19c14efa4b18ee40c0], 
Trojan.Downloader, C:\Windows\utk.exe, Löschen bei Neustart, [ef01924caddd26105a7db1b38f73ef11], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Service\wssvc.exe, Löschen bei Neustart, [dc14f7e77d0d69cd8b0c5d12aa58867a], 
Trojan.Agent, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\jnsi9809.tmp, Löschen bei Neustart, [7c748d51b2d8e84e2e1887e5f70bf907], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\XPVRBXQVYB.EXE, Löschen bei Neustart, [569a9e40ec9e132368f85d37848245bb], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\FBACDDE1-8F46-49A2-8876-7A4FFF393429-1-6.EXE, Löschen bei Neustart, [648c904e5a30bd79e61ab1da7d890ef2], 
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-1-6.EXE, Löschen bei Neustart, [717f37a78505e056d8d2360ca45e50b0], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\TOMORROWGAMES.EXE, Löschen bei Neustart, [22ce35a92d5d43f37bfe620f0cf615eb], 
PUP.Optional.BrowserApps.A, C:\Program Files (x86)\BrowserV30.06\2635401B-3CFB-46D5-ABD5-09A74377D129-1-6.EXE, Löschen bei Neustart, [ae422ab4d5b542f42ea2e9a901056a96], 
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\D7727C01-A306-43E7-8235-EA0E40118144-1-6.EXE, Löschen bei Neustart, [3eb20bd357330c2a71901013f40ed927], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\UPGMSD_DE_005010014.EXE, Löschen bei Neustart, [11dfb925f793280e13db237060a645bb], 
PUP.Optional.PullUpdate.A, C:\ProgramData\DesktopSearch\DESKTOPSEARCH.EXE, Löschen bei Neustart, [9759558957332b0b4719bed63ec842be], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\CROSSBROWSE.EXE, Löschen bei Neustart, [9c5489552c5e57df40c4147f61a5df21], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\CHROME_ELF.DLL, Löschen bei Neustart, [569a9a44800a8fa7857f237025e14db3], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\swhk.dll, Löschen bei Neustart, [5997efefd0ba3ef8a5088880aa586c94], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\SMARTWEBHELPER.EXE, Löschen bei Neustart, [668ab32b1c6ed066ecc149bfbf43aa56], 
PUP.Optional.Downloader.A, C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}\Download.exe, Löschen bei Neustart, [c22e0ed0b1d9eb4b552c7fcca45ebd43], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\SMARTWEBAPP.EXE, Löschen bei Neustart, [e20e647a4c3e5bdbb4f9fd0b00028a76], 
PUP.Optional.SearchProtect, C:\Program Files (x86)\MiuiTab\BROWSERACTION.DLL, Löschen bei Neustart, [49a7d20c26640a2c232fec5ed52de51b], 
PUP.Optional.EORezo, C:\Users\Lucas\AppData\Local\gmsd_de_005010024\UPGMSD_DE_005010024.EXE, Löschen bei Neustart, [8b658d51a2e87fb7af4ff3a07d89cd33], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010024\GMSD_DE_005010024.EXE, Löschen bei Neustart, [d21e97476822d36339c59102f511e21e], 
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-10.EXE, Löschen bei Neustart, [9d53d30b0189e650d6d4ab973ec456aa], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\TOMORROWGAMES32.DLL, In Quarantäne, [2bc528b6eaa0e45291e8cba6f70bf709], 
PUP.Optional.Goobzo.SID.A, C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys, In Quarantäne, [5e927668078338fe479fe3b0df2710f0], 
PUP.Optional.ModGoog, C:\Program Files (x86)\globalUpdate\Update\GLOBALUPDATE.EXE, In Quarantäne, [c828429c6e1c55e1be8818364bb757a9], 
PUP.Optional.AdTech.A, C:\Users\Lucas\AppData\Roaming\pdfie\PDFCONV_64.DLL, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.AdTech.A, C:\Users\Lucas\AppData\Roaming\pdfie\PDFCONV_32.DLL, In Quarantäne, [c32d08d6f9911125ed5c34445ea51ae6], 
PUP.Optional.LuckyTab.A, C:\Program Files (x86)\MiuiTab\SupTab.dll, In Quarantäne, [43ad508e6b1fd2644538d0a67c87936d], 
PUP.Optional.PullUpdate.A, C:\ProgramData\Browser\prompt.exe, In Quarantäne, [708003db0783a096fe5e2b501be7ee12], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\dat\rSAtaR.exe, Löschen bei Neustart, [32bec5195f2b2412c69a3c5863a37987], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\dat\sPLpfCIFRzG.dll, Löschen bei Neustart, [e80823bb305a9e98e67ae6ae10f6ed13], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\dat\xSLUKTZwZnf.exe, Löschen bei Neustart, [88685d81d7b3f046bfa10b899472758b], 
PUP.Optional.ZombieInvasion.A, C:\ProgramData\dCrfrhlREiq\dat\YPAWSGrP.dll, Löschen bei Neustart, [628eb7271a703bfb3448dd5df70f07f9], 
PUP.Optional.PullUpdate.A, C:\ProgramData\DesktopSearch\uninstall.exe, In Quarantäne, [816f4698acde41f5f66a850f9373c838], 
PUP.Optional.PullUpdate.A, C:\ProgramData\Radio\prompt.exe, In Quarantäne, [856b6c722c5efb3bcc904d2e4bb78a76], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\NSISHelper.dll, In Quarantäne, [a24e449afe8cd0668aefbfb243bf0000], 
PUP.Optional.PCOptimizerPro, C:\ProgramData\utk\58AE88240FC2416EAEAD7CADC83DB9E1\setup.exe, In Quarantäne, [8967c21cb7d3ef47b7521a4729d9be42], 
PUP.Optional.CrossRider.A, C:\ProgramData\utk\AF92B591D1B1499E975C7ADABE4D031B\24a4a11.exe, In Quarantäne, [ce22ebf3a2e866d0b8ad7123c145d927], 
PUP.Optional.CrossRider.A, C:\ProgramData\utk\AF92B591D1B1499E975C7ADABE4D031B\setup.exe, In Quarantäne, [0fe113cb2f5b3006da8be6ae23e30cf4], 
PUP.Optional.MagicBall.A, C:\ProgramData\utk\DF63D8DF449B4BD09425112FBAF6EEF4\Download File Name, In Quarantäne, [5a964b930981df57c1be256f75918d73], 
PUP.Optional.WProtectManager.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, In Quarantäne, [17d9cd11711946f047bcbfd6788ec937], 
PUP.Optional.PCOptimizerPro, C:\ProgramData\{254217e2-f341-d2cd-2542-217e2f345f8b}\hqghumeaylnlf.exe, In Quarantäne, [925e9c4296f49b9bf514045da85a3cc4], 
PUP.Optional.Downloader, C:\Users\Lucas\AppData\Roaming\jellylam\rinti.exe, In Quarantäne, [668a35a9bbcf26101898b2fd31d4b34d], 
PUP.Optional.AnyProtect.A, C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe, In Quarantäne, [47a9d00e692142f490da078b74923bc5], 
PUP.Optional.BrowserApps.A, C:\Program Files (x86)\BrowserV30.06\2635401b-3cfb-46d5-abd5-09a74377d129-1-7.exe, In Quarantäne, [20d0f0ee3951f73f8749761c7f87f60a], 
PUP.Optional.BrowserApps.A, C:\Program Files (x86)\BrowserV30.06\2635401b-3cfb-46d5-abd5-09a74377d129-5.exe, In Quarantäne, [539da33b7e0c2115557b3b57bf474eb2], 
PUP.Optional.Downloader.C, C:\Program Files (x86)\BrowserV30.06\Uninstall.exe, In Quarantäne, [b8388a5404863df9df5802761fe33ac6], 
PUP.Optional.BrowserApps.A, C:\Program Files (x86)\BrowserV30.06\UninstallBrw.exe, In Quarantäne, [717fc01e3753f5411ab6c4ce38ced42c], 
PUP.Optional.BrowserApps.A, C:\Program Files (x86)\BrowserV30.06\utils.exe, In Quarantäne, [e0101fbfd1b9e254a03071218e788d73], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\fbacdde1-8f46-49a2-8876-7a4fff393429-1-7.exe, In Quarantäne, [c12f409eaedc6acca65a474411f506fa], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\fbacdde1-8f46-49a2-8876-7a4fff393429-10.exe, Löschen bei Neustart, [17d9efef028841f557a90289c4428a76], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\fbacdde1-8f46-49a2-8876-7a4fff393429-5.exe, In Quarantäne, [856b944a5c2e0b2b6e9238534fb701ff], 
PUP.Optional.Downloader.C, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\Uninstall.exe, In Quarantäne, [915fa03e4e3cd66074c3d2a6b84a4eb2], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\UninstallBrw.exe, In Quarantäne, [8d63e1fd8406b581f40ca6e5986efc04], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\utils.exe, In Quarantäne, [8c64fee04248072f1de30883f01660a0], 
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\CouponsPlus\9WBYNn1wYoYEE1.dll, In Quarantäne, [b8383ba3e0aab77fbf7d304cd131a65a], 
PUP.Optional.MultiPlug, C:\Program Files (x86)\CouponsPlus\9WBYNn1wYoYEE1.exe, In Quarantäne, [f8f8f8e68dfd999d54ef68e854ae9769], 
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\CouponsPlus\9WBYNn1wYoYEE1.x64.dll, In Quarantäne, [b33de1fde0aa31052319ccb03ac8a957], 
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\f6e8597f-1034-43e1-b0ad-1ace7cac5c42-1-7.exe, In Quarantäne, [a8483ca2e5a50135d3d70b37f40e7b85], 
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\f6e8597f-1034-43e1-b0ad-1ace7cac5c42-5.exe, In Quarantäne, [08e8964894f646f0c4e6bb87936f57a9], 
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force\utils.exe, In Quarantäne, [9e528955b2d8d75ff1b97ec4b54d1ae6], 
PUP.Optional.Browserwatch, C:\Program Files (x86)\MiuiTab\BrowerWatchCH.dll, In Quarantäne, [fdf3944a7812d36371a44ff39b6b06fa], 
PUP.Optional.Browserwatch, C:\Program Files (x86)\MiuiTab\BrowerWatchFF.dll, In Quarantäne, [a947be20008a9f974cc9152def1739c7], 
PUP.Optional.Multiplug.A, C:\Program Files (x86)\News Factory\News Factory.exe, In Quarantäne, [a64a548adfab5fd7669c9fb87d85ed13], 
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\d7727c01-a306-43e7-8235-ea0e40118144-1-7.exe, In Quarantäne, [658b3da1b5d56dc98e7340e3dc26cc34], 
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\d7727c01-a306-43e7-8235-ea0e40118144-5.exe, In Quarantäne, [cb25c6185733ee48a45d90939d6510f0], 
PUP.Optional.ObjectBrowser.A, C:\Program Files (x86)\Object Browser\utils.exe, In Quarantäne, [6c84a23c7d0d50e63bc69192d82a5aa6], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Uninstall.exe, In Quarantäne, [47a988568dfd77bfaaed610e7f8342be], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010014\gamesdesktop_widget.exe, In Quarantäne, [fdf37e603951d85ef00ec9caf90d2fd1], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010014\predm.exe, In Quarantäne, [09e7a23c1e6cac8a42acade63dc958a8], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010014\unins000.exe, In Quarantäne, [3db33ba30f7b2b0bcb338a091de9bb45], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010015\gamesdesktop_widget.exe, In Quarantäne, [6090d905642690a6847a6b2822e4e41c], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010015\predm.exe, In Quarantäne, [9b5520be206aa88e23cbfd968284cf31], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010015\unins000.exe, In Quarantäne, [bf3120be1a707eb89866850e0df942be], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010017\gamesdesktop_widget.exe, In Quarantäne, [79773ba3296146f0ed117023bb4b03fd], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010017\predm.exe, In Quarantäne, [1bd5508ec1c995a1aa44405354b237c9], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010017\unins000.exe, In Quarantäne, [e01003dbafdb1e186599c3d06b9beb15], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010018\gamesdesktop_widget.exe, In Quarantäne, [5a969d41d8b2bf77ab53c3d0da2c936d], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010018\predm.exe, In Quarantäne, [757bf7e7860424126d81afe420e64fb1], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010018\unins000.exe, In Quarantäne, [18d8fde1f69476c05ba3bcd7f80e02fe], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010020\gamesdesktop_widget.exe, In Quarantäne, [6d83617d82085fd726d8b0e3a264966a], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010020\predm.exe, In Quarantäne, [3bb5944a41493204737b1f7432d44ab6], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010020\unins000.exe, In Quarantäne, [a050637b0783072fab531b788b7b37c9], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010022\gamesdesktop_widget.exe, In Quarantäne, [7f71b32bd8b2330314eaff94fb0b2cd4], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010022\predm.exe, In Quarantäne, [36baa5398cfe1521d01e9bf8c0466c94], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010022\unins000.exe, In Quarantäne, [fef231ad3a502e0810ee0c87060044bc], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010023\gamesdesktop_widget.exe, In Quarantäne, [33bdbc222466ce68cb330093fd098f71], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010023\predm.exe, In Quarantäne, [638da03e6624b581db13048f8581817f], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010023\unins000.exe, In Quarantäne, [797778669eec38fe42bca8eb9c6a51af], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010024\gamesdesktop_widget.exe, In Quarantäne, [0ae6f1edd5b53204ed11e1b227df7789], 
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_de_005010024\predm.exe, In Quarantäne, [8c6435a9ccbeba7cde10bed58383a25e], 
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_de_005010024\unins000.exe, In Quarantäne, [49a701dd2367f93da7571182b05631cf], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Uninstall.exe, In Quarantäne, [2ec2786690fa2610a325890ae026926e], 
PUP.Optional.MediaPlayer.A, C:\Users\Lucas\AppData\Local\Temp\13574.exe, In Quarantäne, [39b7edf1a6e451e53edccfc3cb3bd828], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\1365.exe, In Quarantäne, [29c7627c7119eb4bcc0ffc5ea85a54ac], 
PUP.Optional.SuperOptimizer.A, C:\Users\Lucas\AppData\Local\Temp\supoptsetup.exe, In Quarantäne, [e60a617daedc191dd619adb57a889070], 
PUP.Optional.MultiPlug.A, C:\Users\Lucas\AppData\Local\Temp\tf5e255917.dll, In Quarantäne, [e808e5f9c0ca1224dee3ce8cd131a858], 
PUP.Optional.Somoto, C:\Users\Lucas\AppData\Local\Temp\bitool.dll, In Quarantäne, [27c914cab5d5cc6a4ad6a8f71fe34cb4], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nsi5AE3.tmp, In Quarantäne, [c42cc9150f7b94a2524a3d2fa75b9769], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nsjB2C2.tmp, In Quarantäne, [09e7d5096525dc5aa5f7f87462a035cb], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nsjDF4E.tmp, In Quarantäne, [08e8934b7f0bac8a6438155749b9fd03], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nsmF0DB.tmp, In Quarantäne, [af41508e68223cfa029a5a12fc065fa1], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nsr84D3.tmp, In Quarantäne, [d61adb03d4b69f97940857157c8623dd], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nst9AC0.tmp, In Quarantäne, [06eaf6e8b0daad893468c1abcb378878], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\ICReinstall_nsx8E90.tmp, In Quarantäne, [648c1ec06d1dbe78e3b97eee966c2ed2], 
PUP.Optional.OfferInstaller.C, C:\Users\Lucas\AppData\Local\Temp\rweD1C0.exe, In Quarantäne, [98588757d8b2de581b78182949b9d22e], 
PUP.Optional.CrossRider.A, C:\Users\Lucas\AppData\Local\Temp\6265.exe, In Quarantäne, [668a22bc800a68ced0305c2fe81e06fa], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\7219.exe, In Quarantäne, [658b07d7f991e94de4f780da24de11ef], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\7220.exe, In Quarantäne, [97598955d2b8ca6c7a61bd9df9092cd4], 
PUP.Optional.BrowserApps.A, C:\Users\Lucas\AppData\Local\Temp\7802.exe, In Quarantäne, [925e8f4fc1c934028050444ec1454db3], 
PUP.Optional.CrossRider.A, C:\Users\Lucas\AppData\Local\Temp\8195.exe, In Quarantäne, [529e6678e2a874c2966a97f473937888], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\8659.exe, In Quarantäne, [41af39a57b0fa78f6576f9616b972ed2], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\8698.exe, In Quarantäne, [c52b805ee2a86acc805b1d3d7c86827e], 
Trojan.Agent, C:\Users\Lucas\AppData\Local\Temp\imru.exe, In Quarantäne, [9a56dd017713d75f58b4d69c0bf86e92], 
PUP.Optional.Multiplug, C:\Users\Lucas\AppData\Local\Temp\3014381927046394415e.exe, In Quarantäne, [22ce924c4d3d092d1761cdaae51d38c8], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\3079.exe, In Quarantäne, [e20ed30ba6e471c53d9e451531d1c63a], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\3366.exe, In Quarantäne, [f9f77767890196a0ab304515dd25a957], 
PUP.Optional.BrowseFox, C:\Users\Lucas\AppData\Local\Temp\nst7EEF.tmp, In Quarantäne, [c62aecf2d4b63ef8e4807fe56f93ae52], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nst9AC0.tmp, In Quarantäne, [a34dd10d1b6f6bcb603c63096f93ad53], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\Temp\nsu2129.tmp, In Quarantäne, [a54bcf0f2a602b0bda98d79aca39ad53], 
PUP.Optional.EORezo, C:\Users\Lucas\AppData\Local\Temp\nsu6B24.tmp, In Quarantäne, [5898746a9ded8babeb133063af5713ed], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsu8A92.tmp, In Quarantäne, [f8f8756921694de93daae97b28dad62a], 
PUP.Optional.BrowseFox, C:\Users\Lucas\AppData\Local\Temp\nsu933C.tmp, In Quarantäne, [3bb51bc3d0ba6cca5410b4b0a161b54b], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsuD35.tmp, In Quarantäne, [d21ee4fa7a109f97b92e9ec610f2d12f], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsv9410.tmp, In Quarantäne, [b53bbd21c5c5c96dd611a7bdaf536a96], 
PUP.Optional.CrossRider.A, C:\Users\Lucas\AppData\Local\Temp\9170.exe, In Quarantäne, [33bd8e507f0b999d10f0365547bf6c94], 
PUP.Optional.CrossRider.A, C:\Users\Lucas\AppData\Local\Temp\9342.exe, In Quarantäne, [c828b5295436c274d9271e6d15f134cc], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\9795.exe, In Quarantäne, [5f91934b7713b28476650c4e22e0e21e], 
PUP.Optional.Unizeto, C:\Users\Lucas\AppData\Local\Temp\Download.exe, In Quarantäne, [ac449846ed9da98d3901fd3d936fd729], 
PUP.optional.OptimizerPro.A, C:\Users\Lucas\AppData\Local\Temp\optprosetup.exe, In Quarantäne, [a24eb02e0d7d86b0f0917ffd6a987b85], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsh4963.tmp, In Quarantäne, [965a746ae0aae2545d72573bd72f57a9], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsh63B.tmp, In Quarantäne, [2cc4fee0e8a2d561844b1c76e521ec14], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\4313.exe, In Quarantäne, [a54bc519800a60d6bb202b2f35cdd62a], 
PUP.Optional.CinemaPlus.A, C:\Users\Lucas\AppData\Local\Temp\4907.exe, In Quarantäne, [fbf5419dbecc95a18a68d3b739cd4bb5], 
PUP.Optional.CinemaPlus.A, C:\Users\Lucas\AppData\Local\Temp\5005.exe, In Quarantäne, [6d83cf0f662459ddd51d5b2f18ee7789], 
PUP.Optional.CinemaPlus.A, C:\Users\Lucas\AppData\Local\Temp\5123.exe, In Quarantäne, [5f91ecf286049b9b4ba70a804fb76b95], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\5160.exe, In Quarantäne, [519f22bcacde0630e8f3c496af5318e8], 
PUP.Optional.CrossRider.A, C:\Users\Lucas\AppData\Local\Temp\5217.exe, In Quarantäne, [1ad609d5b0da082eaa560d7e43c323dd], 
PUP.Optional.CinemaPlus.A, C:\Users\Lucas\AppData\Local\Temp\5367.exe, In Quarantäne, [2bc50bd3bdcda492e909d4b613f3758b], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\5608.exe, In Quarantäne, [d41cb22cfb8f75c154870d4d788a9c64], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\5655.exe, In Quarantäne, [d020f0eeee9cd66010cba3b78d7526da], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsr6377.tmp, In Quarantäne, [7b752eb009811c1ac60996fc62a47f81], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsr6711.tmp, In Quarantäne, [7779538b95f5ed4919ce94d0f80a59a7], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nsr84D3.tmp, In Quarantäne, [866aac32098162d4d6c6a4c822e040c0], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsr8A4F.tmp, In Quarantäne, [c52bbd21f496d85ebb1498fa679f07f9], 
PUP.Optional.Amonentize.A, C:\Users\Lucas\AppData\Local\Temp\nsx8DEE.tmp, In Quarantäne, [22cea33bd6b4cf6721a1b1b157abce32], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nsx8E90.tmp, In Quarantäne, [4ea21fbfd7b365d175277af231d1a060], 
PUP.Optional.TomorrowGames.A, C:\Users\Lucas\AppData\Local\Temp\nsxF798.tmp, In Quarantäne, [6f8133ab17733bfb98e1d29f54ae1fe1], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsz6F3F.tmp, In Quarantäne, [09e7459946448caa13d42e360cf68a76], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsiB168.tmp, In Quarantäne, [8b65a638ff8ba591339c870b3bcb09f7], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsjAE51.tmp, In Quarantäne, [c12f924ce1a9171fc522a9bb4eb4738d], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nsjB2C2.tmp, In Quarantäne, [01ef38a67e0c979f1d7f8eded82a7b85], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nsjDF4E.tmp, In Quarantäne, [25cb01dd77132a0c1d7f99d327dbc53b], 
PUP.Optional.Somoto.C, C:\Users\Lucas\AppData\Local\Temp\nsjFE05.tmp, In Quarantäne, [ef01548a5436d26463876c283bcb8d73], 
PUP.Optional.Somoto.C, C:\Users\Lucas\AppData\Local\Temp\nsc604C.tmp, In Quarantäne, [da1665790a80092d5694a3f1ed198e72], 
PUP.Optional.PreInstaller.A, C:\Users\Lucas\AppData\Local\Temp\nsp55F4.tmp, In Quarantäne, [bf31974797f382b41053b0c133cfd828], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nspE03C.tmp, In Quarantäne, [f0000ed0bbcfe45290576103ed15b050], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsq6DF.tmp, In Quarantäne, [ef01ad310585a78fd017baaab44eae52], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsx4879.tmp, In Quarantäne, [45abcc128604d561725dcbc7d1357b85], 
PUP.Optional.CrossRider.A, C:\Users\Lucas\AppData\Local\Temp\2743.exe, In Quarantäne, [559bad311773aa8ce41c7219b551b050], 
PUP.Optional.Unizeto, C:\Users\Lucas\AppData\Local\Temp\nshD96E.tmp, In Quarantäne, [29c7dc0276147cba8daded4d09f9e41c], 
PUP.Optional.Amonetize.A, C:\Users\Lucas\AppData\Local\Temp\Launcher__10272.exe, In Quarantäne, [b93726b8d7b390a63032134df1117d83], 
PUP.Optional.Amonetize.A, C:\Users\Lucas\AppData\Local\Temp\Launcher__13357.exe, In Quarantäne, [e7098856aedc7cbafa68ea7661a1857b], 
PUP.Optional.Amonetize.A, C:\Users\Lucas\AppData\Local\Temp\Launcher__13889.exe, In Quarantäne, [d41c1ac45436d660b1b1f0700df5de22], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsc49FA.tmp, In Quarantäne, [15db974754367db94e99db89768c2dd3], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nscF29C.tmp, In Quarantäne, [7f712cb21575bf7724abd5bd5ea89868], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\Temp\nsfA4D5.tmp, In Quarantäne, [9b55c915a6e467cff57d3b36bb486997], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsfC454.tmp, In Quarantäne, [db157a64cebced49ba2dd094639f9868], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsfC521.tmp, In Quarantäne, [c22e538b197163d344a3da8a0200d42c], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\Temp\nsg2435.tmp, In Quarantäne, [b33d2faf5139d75f284a1c5527dc946c], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Local\Temp\nsg4D0A.tmp, In Quarantäne, [38b8e0fe0288f046f1de3d55f11540c0], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsrD990.tmp, In Quarantäne, [b9374797236752e4ac3b6afa06fc2dd3], 
PUP.Optional.Infonaut.A, C:\Users\Lucas\AppData\Local\Temp\nsrF4E2.tmp, In Quarantäne, [7e72e7f73d4dde58893faee508fee21e], 
PUP.Optional.Somoto.C, C:\Users\Lucas\AppData\Local\Temp\nssFEDD.tmp, In Quarantäne, [569a10ce0a808ea85d8d3d578f7728d8], 
PUP.Optional.BrowseFox, C:\Users\Lucas\AppData\Local\Temp\nsgA008.tmp, In Quarantäne, [4ea2de0051390f27e87c491b19e9de22], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nsi5AE3.tmp, In Quarantäne, [cf21e3fbcebc9f97c7d52448847e1de3], 
PUP.Optional.InstallCore.A, C:\Users\Lucas\AppData\Local\Temp\nsmF0DB.tmp, In Quarantäne, [1ed26c72078395a1663676f645bdca36], 
PUP.Optional.OurSeaching.A, C:\Users\Lucas\AppData\Local\Temp\nsn7FED.tmp, In Quarantäne, [f7f9e1fdcebc42f40ee9751d0303d22e], 
PUP.Optional.Somoto.C, C:\Users\Lucas\AppData\Local\Temp\nsn85A7.tmp, In Quarantäne, [c22ea33b7f0b5ed832b8e9abd82e32ce], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsnCF6.tmp, In Quarantäne, [b23e13cb88020630be29352fad55d62a], 
PUP.Optional.WebShield.A, C:\Users\Lucas\AppData\Local\Temp\00e67901-2314-4c87-83fe-6dbc43f35d55\setup.exe, In Quarantäne, [a749fee0404ab77fbf521b5a8a768e72], 
PUP.Optional.WebBar.A, C:\Users\Lucas\AppData\Local\Temp\058b21f2-5d90-486f-9da3-fe4af2f71394\web_bar_setup.exe, In Quarantäne, [0ee2706efc8e65d102c760e4b151669a], 
PUP.Optional.SystemNotifier.A, C:\Users\Lucas\AppData\Local\Temp\0935b49e-40ec-459d-a1bd-64de4286cc7b\mini_installer.exe, In Quarantäne, [7d733ca26c1ef145a01f4051f412ad53], 
PUP.Optional.Unizeto, C:\Users\Lucas\AppData\Local\Temp\BA00\temp\Download.exe, In Quarantäne, [03eda43a56343303ae8cea50837f2ed2], 
PUP.Optional.HQVideoPro.A, C:\Users\Lucas\AppData\Local\Temp\bca196b4-e149-4ee7-9528-89dc6be83f74\setup.exe, In Quarantäne, [767a35a9b4d6191d87c3127f4abc16ea], 
PUP.Optional.Iminent.A, C:\Users\Lucas\AppData\Local\Temp\3d7a839f-e55a-4545-bd61-4ef33ecf9852\iminent.exe, In Quarantäne, [915f15c97416a78fa0e8850f0ef848b8], 
Trojan.Dropper, C:\Users\Lucas\AppData\Local\Temp\86de5f62-9173-49a1-a11d-a66fc29e21f9\setup.exe, In Quarantäne, [b9373ca21a70ac8af2d71e2014eead53], 
PUP.Optional.SkyTech.A, C:\Users\Lucas\AppData\Local\Temp\xtmp2083611\QQBrowserFrame.dll, In Quarantäne, [8c64518d9af0af875da8779661a16a96], 
PUP.Optional.SkyTech.A, C:\Users\Lucas\AppData\Local\Temp\xtmp224563\QQBrowserFrame.dll, In Quarantäne, [7779ca14d4b67eb89a6b23ea55ad7d83], 
Trojan.Clicker, C:\Users\Lucas\AppData\Local\Temp\af5dd20b-27e3-4c44-af09-7e097c02a6a2\jfilemanagersetup.exe, In Quarantäne, [06ea27b74248b284ae0ea284669c8779], 
PUP.Optional.SuperOptimizer.A, C:\Users\Lucas\AppData\Local\Temp\c0baf070-491b-4dd5-88b1-bfb2aae25fbc\superoptimizersetup.exe, In Quarantäne, [f000ba2477134de9fa9792d18181cf31], 
PUP.Optional.SystemNotifier.A, C:\Users\Lucas\AppData\Local\Temp\c90b7d74-acd7-4608-9ca8-a6c94327bdab\mini_installer.exe, In Quarantäne, [aa46de0099f1b581447bb7dafd093ac6], 
PUP.Optional.IStartsurf.A, C:\Users\Lucas\AppData\Local\Temp\cad17536-b98d-4d37-877d-8075297b9228\lly_istartsurf.exe, In Quarantäne, [b63a439beaa09c9a86e2e8a925e109f7], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\globalupdate.exe, In Quarantäne, [846ca935d5b516206cda232b0af8827e], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\globalupdateBroker.exe, In Quarantäne, [6e82edf1ff8b1d193610014dff03fb05], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\globalupdateCrashHandler.exe, In Quarantäne, [c12f9747beccf73feb5b0e40de24817f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\globalupdateOnDemand.exe, In Quarantäne, [b73997475139a78f410554fab84ae31d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\goopdate.dll, In Quarantäne, [38b80ed0d5b5db5bfe48ada19b67ee12], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\goopdateres_en.dll, In Quarantäne, [d818d40a2a601f172422aea0ee149b65], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\npglobalupdateUpdate4.dll, In Quarantäne, [727e09d569211026db6b2a24bf4351af], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\psmachine.dll, In Quarantäne, [945cb7274941b086c3830945d92907f9], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.197592\psuser.dll, In Quarantäne, [87696e704a40102636106fdf4eb46799], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\globalupdate.exe, In Quarantäne, [e9079846a0eae4522620c6881ce6c739], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\globalupdateBroker.exe, In Quarantäne, [aa46647ad0ba50e659ed9faf847e1de3], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\globalupdateCrashHandler.exe, In Quarantäne, [f8f88f4fa7e31323ad993e1055adf30d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\globalupdateOnDemand.exe, In Quarantäne, [25cb46983e4c082e8bbbe866e81a4eb2], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\goopdate.dll, In Quarantäne, [80705e808901a5914df9ada1b64c12ee], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\goopdateres_en.dll, In Quarantäne, [7e7213cbd7b367cf80c659f50ff3d12f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\npglobalupdateUpdate4.dll, In Quarantäne, [6987617d0684261082c4381649b933cd], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\psmachine.dll, In Quarantäne, [34bc7f5f1872ca6c6dd9e767748e7b85], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.216344\psuser.dll, In Quarantäne, [b83896483a506fc7a3a3e965d131d12f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\globalupdate.exe, In Quarantäne, [995706d82d5d3ef876d0cf7f1de54cb4], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\globalupdateBroker.exe, In Quarantäne, [618f1fbfff8bc96d1b2b113d8e741ce4], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\globalupdateCrashHandler.exe, In Quarantäne, [fdf3c51994f693a3b294cc82b34fe719], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\globalupdateOnDemand.exe, In Quarantäne, [39b7815d7614d6603412f05e778bdb25], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\goopdate.dll, In Quarantäne, [c12fa13d127884b29da9d975f60c22de], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\goopdateres_en.dll, In Quarantäne, [866abe203555171fb1955cf22fd3aa56], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\npglobalupdateUpdate4.dll, In Quarantäne, [2ec24995f09a1422df670a44b250916f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\psmachine.dll, In Quarantäne, [d51bb32b2763181e30164905b84acb35], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.243306\psuser.dll, In Quarantäne, [ee02b925b9d1a49293b37dd15fa3817f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\globalupdate.exe, In Quarantäne, [faf698468109191d2e180648c042af51], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\globalupdateBroker.exe, In Quarantäne, [8e62fbe31f6b91a58fb789c537cb9e62], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\globalupdateCrashHandler.exe, In Quarantäne, [af41924cd8b290a6460074da70928779], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\globalupdateOnDemand.exe, In Quarantäne, [cf21508e048639fde85e6be325dde61a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\goopdate.dll, In Quarantäne, [4fa1716dd1b940f6a0a67ad40ef449b7], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\goopdateres_en.dll, In Quarantäne, [618f33ab5c2e999d232374da7c86fd03], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\npglobalupdateUpdate4.dll, In Quarantäne, [b83857871b6f70c6380ecd81e022a35d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\psmachine.dll, In Quarantäne, [3ab6eef0a5e542f4d670d67862a09868], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.285380\psuser.dll, In Quarantäne, [f8f8edf17f0b53e341056ee089798e72], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\globalupdate.exe, In Quarantäne, [11df25b9acde3afc80c6103ec43e9769], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\globalupdateBroker.exe, In Quarantäne, [d11f7f5fb0da50e6390d0f3f9171ae52], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\globalupdateCrashHandler.exe, In Quarantäne, [fdf3c519a8e2a59161e53b13de24bf41], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\globalupdateOnDemand.exe, In Quarantäne, [7a766678e6a4e551e165dd71f50d8977], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\goopdate.dll, In Quarantäne, [0fe17f5fd3b706307dc91836719117e9], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\goopdateres_en.dll, In Quarantäne, [ac44bb233753d264c482c68872902fd1], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\npglobalupdateUpdate4.dll, In Quarantäne, [4ca4d40aee9c77bf351194baa75b12ee], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\psmachine.dll, In Quarantäne, [07e900de64266bcb0b3b212d31d1649c], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.301755\psuser.dll, In Quarantäne, [5898a13d5f2b24127acc2b236f93956b], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\globalupdate.exe, In Quarantäne, [618fc717cbbf0a2c67dfcc823ac8c937], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\globalupdateBroker.exe, In Quarantäne, [f6faf6e833571a1c89bdc985ee14ee12], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\globalupdateCrashHandler.exe, In Quarantäne, [a14f419dbbcfc67097afa1adcc363cc4], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\globalupdateOnDemand.exe, In Quarantäne, [cc2418c63852fd39ac9aaba311f130d0], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\goopdate.dll, In Quarantäne, [7f71904eccbef1457cca460882806a96], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\goopdateres_en.dll, In Quarantäne, [3ab60ed0444600361e284c02936fbc44], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\npglobalupdateUpdate4.dll, In Quarantäne, [c42cc41a5b2f14223a0c9faf05fd4eb2], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\psmachine.dll, In Quarantäne, [658b598512785bdb5de91a340bf7f30d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.317450\psuser.dll, In Quarantäne, [579986585f2bfb3b2f17b49aa45e946c], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\globalupdate.exe, In Quarantäne, [a44c8d51f298a29473d36be304fe9a66], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\globalupdateBroker.exe, In Quarantäne, [13dd5c823f4bfd391531b8969072ed13], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\globalupdateCrashHandler.exe, In Quarantäne, [3fb119c5bbcfcb6b53f3400e6d9536ca], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\globalupdateOnDemand.exe, In Quarantäne, [07e90bd3315956e02b1bd6787d85f40c], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\goopdate.dll, In Quarantäne, [b53b4599ff8b92a4242278d6d92954ac], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\goopdateres_en.dll, In Quarantäne, [8e62f4ea99f1cf6762e45fef867c1ee2], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\npglobalupdateUpdate4.dll, In Quarantäne, [d51beef05d2d61d559edfc52df238d73], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\psmachine.dll, In Quarantäne, [925e8e50c2c8db5b47ff7ed0659da65a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.333724\psuser.dll, In Quarantäne, [7d73538bbdcdcf67b393e866986a39c7], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\globalupdate.exe, In Quarantäne, [a24e28b6d8b292a4380ef45a9b67f808], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\globalupdateBroker.exe, In Quarantäne, [14dcc5191d6de84e91b5c8860df5e61a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\globalupdateCrashHandler.exe, In Quarantäne, [5a96bf1fc1c9f343073f94ba8b777b85], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\globalupdateOnDemand.exe, In Quarantäne, [d31d22bc2664191d8abc301e11f127d9], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\goopdate.dll, In Quarantäne, [38b8796561294cea0b3b0747d929a35d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\goopdateres_en.dll, In Quarantäne, [1ad6e5f958320e2849fd9bb309f9bc44], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\npglobalupdateUpdate4.dll, In Quarantäne, [08e8716d2b5f69cd4ff7b29ca85aac54], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\psmachine.dll, In Quarantäne, [7d73d20c6e1c3bfb90b63f0f2dd56898], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.335467\psuser.dll, In Quarantäne, [ab45a13d74163afc2d19490552b060a0], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\globalupdate.exe, In Quarantäne, [99572bb3f8922214e6603519cb37d927], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\globalupdateBroker.exe, In Quarantäne, [12dee0fe602a0432c185c18dc43e5ca4], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\globalupdateCrashHandler.exe, In Quarantäne, [2cc44698fe8c56e0192d3b13f60c09f7], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\globalupdateOnDemand.exe, In Quarantäne, [618fe1fd8406dc5a8db9133bd52d49b7], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\goopdate.dll, In Quarantäne, [d91712cc9dedb97d2d19c688e31f9b65], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\goopdateres_en.dll, In Quarantäne, [32becc128efc45f175d11e30ce34966a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\npglobalupdateUpdate4.dll, In Quarantäne, [06eab32b1a7016200b3b72dcb74b2dd3], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\psmachine.dll, In Quarantäne, [ce222eb0d1b9b38397afbe90b44e39c7], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.365270\psuser.dll, In Quarantäne, [a74938a6c0cad56186c01c32e31f15eb], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\globalupdate.exe, In Quarantäne, [b53b16c86b1f102663e3232b39c926da], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\globalupdateBroker.exe, In Quarantäne, [9b55578701898da9b2945fefb250f709], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\globalupdateCrashHandler.exe, In Quarantäne, [12de06d88901b2840f379cb2da2852ae], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\globalupdateOnDemand.exe, In Quarantäne, [30c013cb5436c5710f37ca84ca38cb35], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\goopdate.dll, In Quarantäne, [00f0bf1fed9d092d1e281f2f33cfcf31], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\goopdateres_en.dll, In Quarantäne, [a24e9747fc8e092d83c38ac40cf608f8], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\npglobalupdateUpdate4.dll, In Quarantäne, [ce22b32bb6d46dc99da985c9cb3721df], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\psmachine.dll, In Quarantäne, [856ba93599f12313eb5bada137cb669a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.372103\psuser.dll, In Quarantäne, [bf31716d256554e2f2545af4946e9070], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\globalupdate.exe, In Quarantäne, [d51b479799f169cd50f658f6ee14c33d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\globalupdateBroker.exe, In Quarantäne, [a050835bff8bba7cac9a6ee0ca38f10f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\globalupdateCrashHandler.exe, In Quarantäne, [f3fde4faed9dbe78e5615fef62a00df3], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\globalupdateOnDemand.exe, In Quarantäne, [1fd1d40ac0ca171fb0965cf2907222de], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\goopdate.dll, In Quarantäne, [a947ba24d4b66fc7cd79bd9120e258a8], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\goopdateres_en.dll, In Quarantäne, [836d35a94e3c092d143273db0ff3bd43], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\npglobalupdateUpdate4.dll, In Quarantäne, [1bd5726c53377cbadd6999b515ed23dd], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\psmachine.dll, In Quarantäne, [ad43805e7f0b2d090e3806483fc32ad6], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.399206\psuser.dll, In Quarantäne, [af413ca25a30e254f4526be30ff3f50b], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\globalupdate.exe, In Quarantäne, [90608559c6c45ed8a1a5dd713bc745bb], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\globalupdateBroker.exe, In Quarantäne, [ed039945137760d6d67074da669c5ba5], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\globalupdateCrashHandler.exe, In Quarantäne, [0be58e504644fa3c48fee06ec042ba46], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\globalupdateOnDemand.exe, In Quarantäne, [0de318c696f463d34105d27cd032da26], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\goopdate.dll, In Quarantäne, [1ed2a33b800a88aeb29492bce61ce917], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\goopdateres_en.dll, In Quarantäne, [c22ebf1f6624fe38c97d0b43bf43738d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\npglobalupdateUpdate4.dll, In Quarantäne, [6e826d71dbaf84b280c69bb306fcc937], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\psmachine.dll, In Quarantäne, [00f0dd01c6c4fc3a11354b03cd35f60a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.407792\psuser.dll, In Quarantäne, [b33d04da73177bbb0c3a9cb2cf331ce4], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\globalupdate.exe, In Quarantäne, [4ca47a6495f5be7889bd1f2ffa08ea16], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\globalupdateBroker.exe, In Quarantäne, [03edebf32664b2844ff7212d808237c9], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\globalupdateCrashHandler.exe, In Quarantäne, [27c9fde11f6b46f08fb70648e71be31d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\globalupdateOnDemand.exe, In Quarantäne, [6c84b42ab8d2300665e174da31d1fb05], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\goopdate.dll, In Quarantäne, [708048968efc1e18e660ea64d42e23dd], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\goopdateres_en.dll, In Quarantäne, [a34dc31b7d0da492be886ae4db270cf4], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\npglobalupdateUpdate4.dll, In Quarantäne, [ef01fbe323676fc79da989c548ba758b], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\psmachine.dll, In Quarantäne, [7e7216c8c4c6b383bc8a8fbfde24936d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.46373\psuser.dll, In Quarantäne, [dd13ae3082087eb88abced610002d030], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\globalupdate.exe, In Quarantäne, [f5fbeaf4a0ead75fb09658f67a888a76], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\globalupdateBroker.exe, In Quarantäne, [9f510dd1f09aa4920b3b0a440200e31d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\globalupdateCrashHandler.exe, In Quarantäne, [668ac01e9ceed95deb5bb797768c0df3], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\globalupdateOnDemand.exe, In Quarantäne, [6c8425b96525ef473d09cf7f37cb837d], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\goopdate.dll, In Quarantäne, [4da3ecf2e5a532044ff7b797837f04fc], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\goopdateres_en.dll, In Quarantäne, [a34da33b7f0b48eebc8a50fe43bffd03], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\npglobalupdateUpdate4.dll, In Quarantäne, [29c76876b8d216206adc56f84cb647b9], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\psmachine.dll, In Quarantäne, [a050f1ed5a301b1b1a2ced61788a8c74], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.6686\psuser.dll, In Quarantäne, [0be52faf305a00367fc7b29c3ec4df21], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\globalupdate.exe, In Quarantäne, [e7098e50f199a6901432133b966c8b75], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\globalupdateBroker.exe, In Quarantäne, [23cd89558efc14226adc66e843bf2ed2], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\globalupdateCrashHandler.exe, In Quarantäne, [2bc5f2ec206a53e3d274e16dc63c26da], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\globalupdateOnDemand.exe, In Quarantäne, [fbf5528c9feb4ceaa3a3d07e1ae8b14f], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\goopdate.dll, In Quarantäne, [88683aa43159ad8972d47ad48d75f907], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\goopdateres_en.dll, In Quarantäne, [618f4698d5b55adc5ee884ca55ad966a], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\npglobalupdateUpdate4.dll, In Quarantäne, [f3fd6a74a4e6ad89cc7a2c22847e52ae], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\psmachine.dll, In Quarantäne, [886834aa18727cba2d19cc82a0625fa1], 
PUP.Optional.ModGoog, C:\Users\Lucas\AppData\Local\Temp\comh.89442\psuser.dll, In Quarantäne, [aa46ca14f59581b54cfa381613ef9d63], 
PUP.Optional.WebShield.A, C:\Users\Lucas\AppData\Local\Temp\6dd687a6-37b8-4ca7-8b18-bccf91e16bfb\setup.exe, In Quarantäne, [d21e9846c3c770c6a46de39221df8c74], 
PUP.Optional.HQVideoPro.A, C:\Users\Lucas\AppData\Local\Temp\72f1aa5d-83c5-4663-a6ad-7b4fce9c7271\setup.exe, In Quarantäne, [47a911cd206a3df972d8771aa5613dc3], 
PUP.Optional.Boost.A, C:\Users\Lucas\AppData\Local\Temp\81432111937\1QFRAK1JUUA==103.exe, In Quarantäne, [44ac36a8ddade155c981266e0501d22e], 
PUP.Optional.SystemNotifier.A, C:\Users\Lucas\AppData\Local\Temp\8528f84e-9f47-42aa-ad2c-c0cb0340eaff\mini_installer.exe, In Quarantäne, [12dec41a07839e98fec170213ec8c13f], 
PUP.Optional.ObjectBrowser.A, C:\Users\Lucas\AppData\Local\Temp\Install_15555\ins_cr.exe, In Quarantäne, [b040508e0288d85ee61bb66d9a681be5], 
PUP.Optional.iWebar.A, C:\Users\Lucas\AppData\Local\Temp\Install_15555\ins_iwebar.exe, In Quarantäne, [a24ecc12c4c6d85e1d9be55cca382ed2], 
PUP.Optional.Imali.SID.A, C:\Users\Lucas\AppData\Local\Temp\n8730\SearchProtectSY_24_02--b3e2f120.exe, In Quarantäne, [80709b43c1c93bfb874f138048be728e], 
PUP.Optional.Wajam.A, C:\Users\Lucas\AppData\Local\Temp\2f69b473-80bf-40ca-8264-08aceca90846\wie_2.19.2.6.exe, In Quarantäne, [5898dc02deacbe78dd9183119472f808], 
PUP.Optional.RinoReader.A, C:\Users\Lucas\AppData\Local\Temp\314044a7-672e-4737-b64f-6292d3f6fb0f\setup.exe, In Quarantäne, [b13f904ef09a14222839dc96a95715eb], 
PUP.Optional.WebShield.A, C:\Users\Lucas\AppData\Local\Temp\395a83b1-d0b4-49b9-92c5-13d7ae0e4b0e\setup.exe, In Quarantäne, [3ab6419da1e9ae889978fb7ab34ddc24], 
PUP.Optional.Multiplug, C:\Users\Lucas\AppData\Local\Temp\F370\temp\3014381927046394415e.exe, In Quarantäne, [b33d1ec00e7cef47dc9c5a1d8181d927], 
PUP.Optional.OfferInstaller.C, C:\Users\Lucas\AppData\Local\Temp\f9626892-7a78-3199-abd2-97bbce96297b\OfferInstaller.exe, In Quarantäne, [f5fbf5e953371f17355e45fcdb27966a], 
PUP.Optional.Wajam.A, C:\Users\Lucas\AppData\Local\Temp\fb510709-59d9-4589-b978-8a3b88330ae2\wie_2.19.2.6.exe, In Quarantäne, [32bed40ad1b93ef89fcf0d8746c07789], 
PUP.Optional.WebBar.A, C:\Users\Lucas\AppData\Local\Temp\fb77d127-3dd3-4baf-a66b-d6c44acaa8a1\web_bar_setup.exe, In Quarantäne, [14dc03db93f785b1705913315fa3738d], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\fd05fcfe-9628-46e0-b61d-dc940cbea908\installer.exe, In Quarantäne, [2ec2b5297e0c9b9b5d7ea2b853affe02], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-KBU7K.tmp\gentlemjmp_ieu.exe, In Quarantäne, [539d4a947b0f3402b836c5cef610629e], 
PUP.Optional.WordShark.A, C:\Users\Lucas\AppData\Local\Temp\is-KKCI4.tmp\wordshark.exe, In Quarantäne, [cf21e2fcd6b47bbbfa9dff7018eae11f], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-M9LU7.tmp\package_vuupc_installer_multilang.exe, In Quarantäne, [02ee845accbe280ed2f1927506fc15eb], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-P75HU.tmp\436.exe, In Quarantäne, [20d0835b0585b5817fb63d35d42efb05], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-P75HU.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [ce22538b3c4ecb6b0c291161de245ba5], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-P75HU.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [ef019549642637ff1e179ed4788aa957], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-PIL1I.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [9957786632581f176cc9a2d053af9d63], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-PIL1I.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [faf6f5e9a6e449ed043189e9e81ad729], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-QJFUT.tmp\gentlemjmp_ieu.exe, In Quarantäne, [17d9fae47c0e58dec32b9df69175c739], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-QOO1N.tmp\436.exe, In Quarantäne, [12de08d6d0ba70c6979ea4ced82a7c84], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-QOO1N.tmp\465.exe, In Quarantäne, [935d12cc305aeb4b7bbab0c2649e18e8], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-QOO1N.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [ad43e5f959314aecb0850c66c33fd42c], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-QOO1N.tmp\package_pcrossbrowser_installer_multilang.exe, In Quarantäne, [8e62b925cebc3ef8ce67175b0101a957], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-QOO1N.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [5f91ac32e6a43204d95cbbb752b03dc3], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsu32E3.tmp\nsCBHTML5.dll, In Quarantäne, [69871ec0a2e82c0aa641fd6741c1ca36], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsv2C6E.tmp\nsCBHTML5.dll, In Quarantäne, [fbf54599a3e72511b82f6afa80820af6], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Temp\nsv9609.tmp\DCytdkietut_tutdk_setup.exe, In Quarantäne, [648c726ca2e856e0102585ce49b9c63a], 
Trojan.Clicker, C:\Users\Lucas\AppData\Local\Temp\e3018321-a349-446b-90b0-13642c2ac1d6\jfilemanagersetup.exe, In Quarantäne, [4ca4c915d5b51224a01cc75f20e2f907], 
PUP.Optional.HQVideoPro.A, C:\Users\Lucas\AppData\Local\Temp\d42542a9-c38e-4fb4-9737-1e3dfc6f6bb1\setup.exe, In Quarantäne, [43ad5e801773cd69bb8f2b66db2b1de3], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\Temp\4d92cd03-960d-4a90-bac5-1bd44f258ef5\installer.exe, In Quarantäne, [a24edd010585f442c516b2a80bf7d42c], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsrB7BC.tmp\nsCBHTML5.dll, In Quarantäne, [4da3ad3117731c1ac0274222b74bab55], 
PUP.Optional.MyBestOffersToday.A, C:\Users\Lucas\AppData\Local\Temp\is-00PC6.tmp\gentlemjmp_ieu.exe, In Quarantäne, [02ee1ac4d2b8ca6c0da3b54f1de58b75], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-1RMMT.tmp\gentlemjmp_ieu.exe, In Quarantäne, [25cb08d6404a60d6f8f61182b84ebe42], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-1U0M1.tmp\gentlemjmp_ieu.exe, In Quarantäne, [eb0585592c5e9e985e90474c2cda22de], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-2UA95.tmp\gentlemjmp_ieu.exe, In Quarantäne, [2bc54c92f99187afc529256ef41229d7], 
PUP.Optional.Solimba, C:\Users\Lucas\AppData\Local\Temp\is-4P1HI.tmp\Bundle_Solimba.exe, In Quarantäne, [40b065792565ef47b0f5049074924db3], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-5BOKB.tmp\gentlemjmp_ieu.exe, In Quarantäne, [569a7c62d8b2989e905e1281de2815eb], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-61CA3.tmp\436.exe, In Quarantäne, [5a96449abad0d066ea4b5c16fe0439c7], 
PUP.Optional.EORezo, C:\Users\Lucas\AppData\Local\Temp\is-6AAPC.tmp\games desktop.tmp, In Quarantäne, [46aaf4eaf6945fd73ec098fbda2c827e], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-8LOR5.tmp\436.exe, In Quarantäne, [f7f9c21ca7e3ee4841f4472b46bca759], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-8LOR5.tmp\465.exe, In Quarantäne, [c32d35a90b7fc96d231289e9b74b54ac], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-8LOR5.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [5e925886bcce0531d560f87a35cdc040], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-8LOR5.tmp\package_pcrossbrowser_installer_multilang.exe, In Quarantäne, [e30df7e73c4e0e282e07e78b09f96e92], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-8LOR5.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [ae428559f1997db99f965220ac5628d8], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsz984A.tmp\nsCBHTML5.dll, In Quarantäne, [ed0331ad4d3d7eb82fb899cbd42e748c], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nszD598.tmp\nsCBHTML5.dll, In Quarantäne, [3db37965286238feeff84f15b05246ba], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsjAF62.tmp\nsCBHTML5.dll, In Quarantäne, [3eb2af2fb6d467cf2fb84f1537cb966a], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nskD6A1.tmp\nsCBHTML5.dll, In Quarantäne, [6789e5f9b1d99c9a8a5ddd87ac561fe1], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsc7041.tmp\nsCBHTML5.dll, In Quarantäne, [23cdeef0ccbe94a201e687ddfe04ad53], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Temp\nsp1739.tmp\DCytdkietut_tutdk_setup.exe, In Quarantäne, [45ab934b236726105ed7391a1ae8a957], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsqAC85.tmp\nsCBHTML5.dll, In Quarantäne, [5b954e9059316fc73daa3133f50d34cc], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsr3544.tmp\nsCBHTML5.dll, In Quarantäne, [7b75ffdf434752e43ea91b4930d29b65], 
PUP.Optional.IStartsurf.A, C:\Users\Lucas\AppData\Local\Temp\15d7f332-6892-46ce-a785-6c3661b137ee\lly_istartsurf.exe, In Quarantäne, [a24ecf0f5f2b80b6a6c2721f2ed89868], 
Trojan.Dropper, C:\Users\Lucas\AppData\Local\Temp\16fc2c76-6cd8-4085-b179-28b14183eb8d\setup.exe, In Quarantäne, [f7f9f1edf496b284a4259ea0f70ba65a], 
PUP.Optional.Multiplug, C:\Users\Lucas\AppData\Local\Temp\1AB8\temp\1539358894756496780b.exe, In Quarantäne, [6c84ae306a20ea4c7ff9a0d7f210ce32], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\Temp\is-UCBTK.tmp\gentlemjmp_ieu.exe, In Quarantäne, [be32736b17738ea80ce2d5bee2244cb4], 
PUP.Optional.GeForce.A, C:\Users\Lucas\AppData\Local\Temp\Install_20397\ins_geforce.exe, In Quarantäne, [698709d51d6dc76f4c5e85bdba48a957], 
PUP.Optional.GeForce.A, C:\Users\Lucas\AppData\Local\Temp\Install_21024\ins_geforce.exe, In Quarantäne, [08e8b42a4d3da3931c8ed86a5da5728e], 
PUP.Optional.GeForce.A, C:\Users\Lucas\AppData\Local\Temp\Install_3405\ins_geforce.exe, In Quarantäne, [d71916c85b2fee4861494af857ab629e], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsd3302.tmp\nsCBHTML5.dll, In Quarantäne, [fdf335a9addd003645a2d78de81a6997], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsg317D.tmp\nsCBHTML5.dll, In Quarantäne, [31bff7e7701ab97d0ed996cee61ccc34], 
PUP.Optional.CheckOffer, C:\Users\Lucas\AppData\Local\Temp\nsrD42.tmp\nsCBHTML5.dll, In Quarantäne, [e20e33ab9cee9f9734b392d2b949a35d], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-BPOJJ.tmp\436.exe, In Quarantäne, [648c75698604340289ac90e228da22de], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-BPOJJ.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [8e62746aff8b3303f4413e349d653fc1], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-BPOJJ.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [658befef8ffb3204fe37c9a9d42ee21e], 
PUP.Optional.WordShark.A, C:\Users\Lucas\AppData\Local\Temp\is-BSAGJ.tmp\wordshark.exe, In Quarantäne, [37b93da18ffbba7c6a2d501f2bd70cf4], 
PUP.Optional.SuperClick.A, C:\Users\Lucas\AppData\Local\Temp\is-GO7KP.tmp\sc-setup-1.10.0.16.exe, In Quarantäne, [ad4309d5c7c3e74f047482121aec728e], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-GR9JG.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [8f617668c5c5aa8cc471fb7700025da3], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-H1TPR.tmp\package_pcrossbrowser_installer_multilang.exe, In Quarantäne, [668a07d7b7d3cd691b1a39397d8508f8], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-H1TPR.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [26ca518d0a80d95da78e89e9b9498878], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-ICTU8.tmp\465.exe, In Quarantäne, [3cb41bc35e2cc472bd78aec451b102fe], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-ICTU8.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [07e9706e800aaa8ce84dfe74f40ef60a], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-ICTU8.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [f000b32bc1c9a39378bd126028daf40c], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-K4BS3.tmp\11.exe, In Quarantäne, [ec0421bd444653e3989d98dafc06c040], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-K4BS3.tmp\436.exe, In Quarantäne, [17d99c428cfe2a0cab8a0072639f669a], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-K4BS3.tmp\package_BubbleSound_installer_multilang.exe, In Quarantäne, [14dc1cc22c5e66d013226d05c141649c], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-K4BS3.tmp\package_pcrossbrowser_installer_multilang.exe, In Quarantäne, [10e0ae300b7fc86ec96cbab808fa738d], 
Adware.EoRezo, C:\Users\Lucas\AppData\Local\Temp\is-K4BS3.tmp\package_SByoutube_installer_multilang.exe, In Quarantäne, [a64a31adc2c8d3638aab1b57ee14fc04], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Temp\nswEB4A.tmp\DCytdkietut_tutdk_setup.exe, In Quarantäne, [c92702dc1476241262d3a0b38280b848], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nseAB1C.tmp, In Quarantäne, [4aa61fbf5832b77f8ce63d34748f7789], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsaD01D.tmp, In Quarantäne, [cf21a43a6c1ead89531f10613ac9d32d], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsb3B6F.tmp, In Quarantäne, [c7296e70b4d6bf77d49ecba660a30000], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsb818D.tmp, In Quarantäne, [fbf514ca216963d3c2b0066b788b7a86], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nse5A99.tmp, In Quarantäne, [eb050fcfdfab979fef83343da85bd32d], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nseA2A7.tmp, In Quarantäne, [6c84a5396f1bc6707200f57c42c158a8], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsfA4D5.tmp, In Quarantäne, [04ecf7e7e1a9c86e0f6350213fc452ae], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsg2435.tmp, In Quarantäne, [16da7d61a5e5989e6210fc75e22120e0], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsgCC5F.tmp, In Quarantäne, [21cf924cb8d2bd79f37fc8a947bc29d7], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsh3245.tmp, In Quarantäne, [19d7c8167c0e8da94f23da9760a37c84], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsk132F.tmp, In Quarantäne, [ef015c825238d26483efda9720e39769], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nskA330.tmp, In Quarantäne, [a24eac32a3e7a88e244e87eaa75cd030], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nskDE7.tmp, In Quarantäne, [737d31adb6d47db9363cc1b022e10af6], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsl95C6.tmp, In Quarantäne, [5a96518d701ab38332402e43fa0952ae], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsm9700.tmp, In Quarantäne, [25cb904e07837cba2a480c65a45f669a], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsnA5CC.tmp, In Quarantäne, [8070d00e9af0a393e1916e03b15256aa], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsq5E3A.tmp, In Quarantäne, [ab45d8066822a591abc781f00cf70ef2], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsrB4CD.tmp, In Quarantäne, [6d83a13d1e6cc670b9b9fc75da298977], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nsu2129.tmp, In Quarantäne, [45abb22c7f0b290d482a1d5455ae3fc1], 
PUP.Optional.AnyProtect, C:\Users\Lucas\AppData\Local\nszE710.tmp, In Quarantäne, [925e835bef9b4ee892e078f930d3c838], 
PUP.Optional.CrossBrowse, C:\Users\Lucas\AppData\Local\D8B691CC-63CA-4FEC-B822-B342242FFE81\D8B691CC-63CA-4FEC-B822-B342242FFE81.exe, In Quarantäne, [68886975abdf40f65685b5a507fbd22e], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\Download\myoffergroup_de.exe, In Quarantäne, [21cf7965b5d557df6a84b7dc6a9cd12f], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\Download\setup_recover_rec_de_39.exe, In Quarantäne, [6d83e8f6a0ea7eb821cd5e3520e646ba], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\Download\setup_recover_rec_de_40.exe, In Quarantäne, [e40c22bc286284b21ad4fd964bbbbd43], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010015\upgmsd_de_005010015.exe, In Quarantäne, [12de8b530684e254bc326b286d9929d7], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010017\upgmsd_de_005010017.exe, In Quarantäne, [0be5736be1a93105e905e5ae84827a86], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010018\upgmsd_de_005010018.exe, In Quarantäne, [c82823bb1377bb7b3bb37320a462c23e], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010020\upgmsd_de_005010020.exe, In Quarantäne, [d11f37a7008a96a00de1167d22e453ad], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010022\upgmsd_de_005010022.exe, In Quarantäne, [42ae776791f98aac915dc9cafb0b4fb1], 
PUP.Optional.Tuto4PC.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010023\upgmsd_de_005010023.exe, In Quarantäne, [2cc4d40abcce3cfabb33f49f60a68977], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_23285\DCytdkietut_tutdk_setup.exe, In Quarantäne, [3bb5d806197191a5ad8887cc03ff01ff], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installgeforce_1313\DCytdkietut_tutdk_setup.exe, In Quarantäne, [7d7308d6e5a52a0cda5b351ed72b5fa1], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installgeforce_16163\DCytdkietut_tutdk_setup.exe, In Quarantäne, [dd13805e9af09d99b3829ab97f835da3], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installgeforce_23855\DCytdkietut_tutdk_setup.exe, In Quarantäne, [638d34aa53371e1894a1292af80aaa56], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installshopperpro_14733\DCytdkietut_tutdk_setup.exe, In Quarantäne, [915f1ac4ef9bfc3a3df82d2660a2659b], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installshopperpro_16163\DCytdkietut_tutdk_setup.exe, In Quarantäne, [c7294797a7e37cba2e0784cfe71b827e], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installshopperpro_23855\DCytdkietut_tutdk_setup.exe, In Quarantäne, [88686a74fc8ef44250e598bb3fc3a55b], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installytd_21360\DCytdkietut_tutdk_setup.exe, In Quarantäne, [9e528f4fb8d27db90f2655fe51b108f8], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Installytd_5560\DCytdkietut_tutdk_setup.exe, In Quarantäne, [a54b449a9ded5fd7fc39c98a80822dd3], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_10732\DCytdkietut_tutdk_setup.exe, In Quarantäne, [2ac65a8419717bbb52e398bb4cb6669a], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_11100\DCytdkietut_tutdk_setup.exe, In Quarantäne, [2dc3429c2a60ba7cbb7ae86bc939d927], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_1200\DCytdkietut_tutdk_setup.exe, In Quarantäne, [7b752eb0296140f6ba7b95be16ec40c0], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_12687\DCytdkietut_tutdk_setup.exe, In Quarantäne, [e10f528c5238181eb2838dc618eacd33], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_12711\DCytdkietut_tutdk_setup.exe, In Quarantäne, [23cda638aedc83b3c4712b287d85669a], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_14233\DCytdkietut_tutdk_setup.exe, In Quarantäne, [1ad61cc25c2eee48c66faba860a23ac6], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_1598\DCytdkietut_tutdk_setup.exe, In Quarantäne, [906005d93b4f24128ea76ce7e0224eb2], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_16862\DCytdkietut_tutdk_setup.exe, In Quarantäne, [77796f6f3e4cf14571c40d46996951af], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_16921\DCytdkietut_tutdk_setup.exe, In Quarantäne, [589834aaf1994beb92a32231cc365ca4], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_18331\DCytdkietut_tutdk_setup.exe, In Quarantäne, [f8f87b636d1d81b55ed789caa95929d7], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_18818\DCytdkietut_tutdk_setup.exe, In Quarantäne, [8f617d613a500f27e154233018eaee12], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_2139\DCytdkietut_tutdk_setup.exe, In Quarantäne, [60904a940189c571b283b0a318ea0cf4], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_22866\DCytdkietut_tutdk_setup.exe, In Quarantäne, [9060518df3976dc9979ef95a3dc5926e], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_22872\DCytdkietut_tutdk_setup.exe, In Quarantäne, [4da307d72862ac8a71c4a2b1a55d60a0], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_23488\DCytdkietut_tutdk_setup.exe, In Quarantäne, [bb352db14b3f23134de86be8828021df], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_23648\DCytdkietut_tutdk_setup.exe, In Quarantäne, [688819c55436ba7caf861043768cd32d], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_24450\DCytdkietut_tutdk_setup.exe, In Quarantäne, [01efffdfc5c540f66fc656fd709204fc], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_24944\DCytdkietut_tutdk_setup.exe, In Quarantäne, [39b755895436b185b77e0f445fa304fc], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_26438\DCytdkietut_tutdk_setup.exe, In Quarantäne, [ed0356886327de58ad88aba8758d8f71], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_26783\DCytdkietut_tutdk_setup.exe, In Quarantäne, [5c940ad4bbcf13230134183bce347888], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_27289\DCytdkietut_tutdk_setup.exe, In Quarantäne, [06ea59859af0df57bc796ee517eba060], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_27480\DCytdkietut_tutdk_setup.exe, In Quarantäne, [a24e9b436c1e90a6a88daca7b052a060], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_27746\DCytdkietut_tutdk_setup.exe, In Quarantäne, [1ad605d9c5c566d084b1f45f24deed13], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_27897\DCytdkietut_tutdk_setup.exe, In Quarantäne, [f5fb746a16743df9340173e035cdab55], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_28387\DCytdkietut_tutdk_setup.exe, In Quarantäne, [c828edf1a9e14ee886af8dc6cc36aa56], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_29247\DCytdkietut_tutdk_setup.exe, In Quarantäne, [e7099e40098155e19c990e45e41e6a96], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_32298\DCytdkietut_tutdk_setup.exe, In Quarantäne, [d11f647a5139ba7cba7bd57e2fd3c13f], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_4187\DCytdkietut_tutdk_setup.exe, In Quarantäne, [99579648c8c2003670c5153ed032dc24], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_826\DCytdkietut_tutdk_setup.exe, In Quarantäne, [539d2eb0206a300688adcc87ed1552ae], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_8622\DCytdkietut_tutdk_setup.exe, In Quarantäne, [638dd9052466d95df93ce370d0329b65], 
PUP.Optional.SpeedBit, C:\Users\Lucas\AppData\Local\Installer\Install_8831\DCytdkietut_tutdk_setup.exe, In Quarantäne, [d020429cec9e93a339fcf65deb176b95], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\__u.exe, In Quarantäne, [945cb8263c4eca6c6f3e4cbc9a6823dd], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\BrowserV30.06\BGNOVA.HTML, In Quarantäne, [34bc07d73159b581b758aa578c78f20e], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV06.07\BGNOVA.HTML, In Quarantäne, [6f81b727a6e4320431de669bc53f768a], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Ge-Force\BGNOVA.HTML, In Quarantäne, [41afd7076b1f78be5db2bc450400827e], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Ge-Force\Uninstall.exe, In Quarantäne, [41afd7076b1f78be5db2bc450400827e], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Object Browser\BGNOVA.HTML, In Quarantäne, [e10fa13d692184b29b7415ec8c781ae6], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Object Browser\Uninstall.exe, In Quarantäne, [e10fa13d692184b29b7415ec8c781ae6], 
PUP.Optional.Goobzo.A, C:\Windows\System32\Tasks\Inst_Rep, In Quarantäne, [609003db44460234aa5fcf3557ad6898], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CROSSBROWSE.LNK, In Quarantäne, [b0404797800a2b0b73c7c73dbb4902fe], 
PUP.Optional.Crossbrowse.C, C:\Windows\System32\Tasks\CROSSBROWSE, In Quarantäne, [1ed2e1fd0585ce682c0fb35140c4ee12], 
PUP.Optional.Crossbrowse.C, C:\Windows\Tasks\CROSSBROWSE.JOB, In Quarantäne, [d020d608a1e98ea8ab91ad578c78c63a], 
PUP.Optional.Crossbrowse.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CROSSBROWSE.LNK, In Quarantäne, [a7496a74bcceaa8ce58562a2b054e21e], 
PUP.Optional.AnyProtect.A, C:\Windows\Tasks\APSNOTIFIERPP1.JOB, In Quarantäne, [6e82ba2484067cbad412996b06fe867a], 
PUP.Optional.AnyProtect.A, C:\Windows\Tasks\APSNOTIFIERPP2.JOB, In Quarantäne, [6c84b529e2a8003637af56ae9b696997], 
PUP.Optional.AnyProtect.A, C:\Windows\Tasks\APSNOTIFIERPP3.JOB, In Quarantäne, [955be0feb0daa88e578f857f788cbd43], 
PUP.Optional.AnyProtect.A, C:\Windows\System32\Tasks\APSNOTIFIERPP1, In Quarantäne, [7e7213cb87031026cd1a2dd78183dc24], 
PUP.Optional.AnyProtect.A, C:\Windows\System32\Tasks\APSNOTIFIERPP2, In Quarantäne, [9e523ba31971e551ebfcba4adb29d42c], 
PUP.Optional.AnyProtect.A, C:\Windows\System32\Tasks\APSNOTIFIERPP3, In Quarantäne, [68882faf3a5046f0e8ff7094778d3bc5], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\Desktop\ANYPROTECT.LNK, In Quarantäne, [b739d30bb3d7cf6709dfb351ee1648b8], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Local\SmartWeb\uninst.lnk, In Quarantäne, [e40c5c8253370036957b20e537cd07f9], 
PUP.Optional.ShopperPro.A, C:\Windows\System32\Tasks\SPBIW_UPDATETASK_TIME_313035363230333430362D5523372A34452D4132575B32, In Quarantäne, [c22e6579ccbe072fb7b2a26c9e6629d7], 
PUP.Optional.ABEngine.A, C:\Users\Lucas\AppData\Local\Temp\abengine.log, In Quarantäne, [b040a6381c6e4de9110d1cf318ec54ac], 
PUP.Optional.ABEngine.A, C:\Windows\Temp\abengine.log, In Quarantäne, [e50bc21c19717db964ba6aa5f113bc44], 
PUP.Optional.Winsta.A, C:\Users\Lucas\AppData\Roaming\Winsta\Winsta.exe, In Quarantäne, [d51b538b7317280e2a5cb75824e08080], 
PUP.Optional.WinKit.A, C:\Users\Lucas\AppData\Roaming\WinKit\tosty.dat, In Quarantäne, [00f0dfff3d4db581aec44fc2798bcb35], 
PUP.Optional.WinKit.A, C:\Users\Lucas\AppData\Roaming\WinKit\Updater.exe, In Quarantäne, [00f0dfff3d4db581aec44fc2798bcb35], 
PUP.Optional.ASPackage.A, C:\Users\Lucas\AppData\Roaming\ASPackage\UNINSTALL.EXE, In Quarantäne, [1dd324ba3357162035e6090a0ef6b54b], 
PUP.Optional.ASPackage.A, C:\Users\Lucas\AppData\Roaming\ASPackage\ASPackage.exe, In Quarantäne, [1dd324ba3357162035e6090a0ef6b54b], 
PUP.Optional.ASPackage.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage\CONFIGURE.LNK, In Quarantäne, [836d528c2367b581af6d24efd034ea16], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\MESSAGEBOX.XML, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\402.json, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\uninstallDlg2.xml, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\uninstalled2.ini, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\UninstallManager.exe, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\bg.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\bg1.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\bk_shadow.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\button.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\button1.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\checkbox.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\checkbox_select.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\checked.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\close.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\loading_bg.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\loading_light.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\min.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\scrollbar.bmp, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\Thumbs.db, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\unchecked.png, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\code1.jpg, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\code2.jpg, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\code3.jpg, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\code4.jpg, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\code5.jpg, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\code6.jpg, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.MyStartSearch.A, C:\Users\Lucas\AppData\Roaming\mystartsearch\images\code\Thumbs.db, In Quarantäne, [fcf4cf0f4347f145affa02146f957e82], 
PUP.Optional.SmartWeb.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk, In Quarantäne, [cb25984637532f0701b15fb8de265ba5], 
PUP.Optional.SmartWeb.A, C:\Windows\System32\Tasks\SMARTWEB UPGRADE TRIGGER TASK, In Quarantäne, [29c7e1fd870339fdd0e56bacad570000], 
PUP.Optional.Goobzo, C:\Windows\System32\Tasks\SMW_UPDATETASK_TIME_313035363230333430362D5523372A34452D4132575B32, In Quarantäne, [aa462bb3d0ba31054e9b7baa45bf20e0], 
PUP.Optional.Goobzo, C:\ProgramData\SearchModule\smhe.js, In Quarantäne, [6e82e1fd107a023442a80c19996b23dd], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\SHOPPERPRO.EXE, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\config.json, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\database1_0_0.ej, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\database1_0_0.json, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\manifest.json, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.dll, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro64.dll, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\SPRemove.exe, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\chrome.manifest, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\install.rdf, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.js, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.xul, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\shopperpro_128.png, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\config.json, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\database1_0_0.ej, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\jsdrv.exe, Löschen bei Neustart, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2069\jsdrv.sys, In Quarantäne, [01ef706eb8d25fd767fed5541fe501ff], 
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SHOPPERPRO, In Quarantäne, [e20edb037b0f95a16408ff2ae61e40c0], 
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SHOPPERPROJSUPD, In Quarantäne, [1ed2bb239af090a66d00bc6d32d256aa], 
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPDriver, In Quarantäne, [32bef2ecaae0c670c2ac66c306fe9967], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-1-6, In Quarantäne, [45abd30b7e0c70c63bae59d3a65efc04], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-1-7, In Quarantäne, [e40c0fcff496979faf3a909c2bd9a65a], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-5, In Quarantäne, [10e04b93c0cac07631b82408897bdd23], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-5_USER, In Quarantäne, [519fa03e5931a88e925787a52bd933cd], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-1-6, In Quarantäne, [bd338a542169f34302e762cad82c19e7], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-1-7, In Quarantäne, [747cf7e7e2a842f4925778b4db2924dc], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-5, In Quarantäne, [9a5604dac7c30333529764c81fe55ca4], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-5_USER, In Quarantäne, [a64a27b7c7c3f046da0fa18bd0344bb5], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-1-6, In Quarantäne, [b43ceaf4e7a353e3ce1bcf5da75d08f8], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-1-7, In Quarantäne, [e60a46988cfef1458168d755eb19936d], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-10_USER, In Quarantäne, [5c94cf0fcebc270f4e9bb973a0646799], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-5, In Quarantäne, [eb05bc22aedc340216d376b656aec040], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-5_USER, In Quarantäne, [539d14ca7d0d78beeaff1b11788c5ca4], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-1-6, In Quarantäne, [8a66845a69217eb8955443e9a55f32ce], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-1-7, In Quarantäne, [5d9328b6ee9cf145c722f23a0301e61a], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-10_USER, In Quarantäne, [826e24bae3a73afc47a2dd4f669ed927], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-5, In Quarantäne, [767a95499ded013562879498da2ad42c], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-5_USER, In Quarantäne, [d020706e8703a096d01961cbab5952ae], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-1-6.JOB, In Quarantäne, [e90787578406a3933412265e976e946c], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-1-7.JOB, In Quarantäne, [4fa123bb42487fb7bb8b0b7912f3bd43], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-5.JOB, In Quarantäne, [d31d726c4446e2548eb8c8bc06ff768a], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2635401B-3CFB-46D5-ABD5-09A74377D129-5_USER.JOB, In Quarantäne, [df118f4f1179e254281ea0e4c73e53ad], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-1-6.JOB, In Quarantäne, [e808ae3055357db9380e0c7850b50000], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-1-7.JOB, In Quarantäne, [23cd934bff8b8da97ccae1a3996c17e9], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-5.JOB, In Quarantäne, [05eb805e5a30fa3c3d097212c63fbe42], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\D7727C01-A306-43E7-8235-EA0E40118144-5_USER.JOB, In Quarantäne, [836d20be2c5e52e451f5c7bdcd38758b], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-1-6.JOB, In Quarantäne, [d719934bbdcdd0667ccac0c49d6860a0], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-1-7.JOB, In Quarantäne, [6090c41a8bff4beb1b2b453fa85d7e82], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-10_USER.JOB, In Quarantäne, [27c9b02eb7d30e28aa9cfa8ace376c94], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-5.JOB, In Quarantäne, [45abce100d7d00364303aed611f4b34d], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\F6E8597F-1034-43E1-B0AD-1ACE7CAC5C42-5_USER.JOB, In Quarantäne, [4fa1607ed6b479bd71d57f054eb720e0], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-1-6.JOB, In Quarantäne, [b33d76682f5bc57161e5ef954cb98080], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-1-7.JOB, In Quarantäne, [4da3944a42482e0876d01d67b74e24dc], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-10_USER.JOB, In Quarantäne, [757be6f82c5eae884ff7057f5aab8c74], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-5.JOB, In Quarantäne, [9a56edf10d7dc76fba8cceb613f22bd5], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\FBACDDE1-8F46-49A2-8876-7A4FFF393429-5_USER.JOB, In Quarantäne, [5c940cd2018964d24ef87a0ac63f0df3], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\GLOBALUPDATEUPDATETASKMACHINECORE.JOB, In Quarantäne, [cb25dfffbfcb77bfe66f5f259a6bce32], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\GLOBALUPDATEUPDATETASKMACHINECORE, In Quarantäne, [d41caa343258d75f65f13f4500058080], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\GLOBALUPDATEUPDATETASKMACHINEUA.JOB, In Quarantäne, [40b019c5ed9db482a8af760e2cd9cd33], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\GLOBALUPDATEUPDATETASKMACHINEUA, In Quarantäne, [2ec2736b0e7c93a369efb9cbcb3a24dc], 
PUP.Optional.Vitruvian.A, C:\Users\Lucas\AppData\Local\Temp\VITRUVIAN-INSTALLER-HARDWAREPROFILE-V0001, In Quarantäne, [3db3d90572189a9ccf77f894a95ced13], 
PUP.Optional.Vitruvian.A, C:\Users\Lucas\AppData\Local\Temp\VITRUVIAN-INSTALLER-INSTALL-V0003, In Quarantäne, [9e52518d2862fa3cac9a29639e678d73], 
PUP.Optional.Vitruvian.A, C:\Users\Lucas\AppData\Local\Temp\VITRUVIAN-INSTALLER-PROCESSES-V0002, In Quarantäne, [77799a44206ad264b492a5e70ff641bf], 
PUP.Optional.Vitruvian.A, C:\Users\Lucas\AppData\Local\Temp\VITRUVIAN-INSTALLER-SCHEDULEDTASKS-V0001, In Quarantäne, [31bf37a7b2d82e08ca7c622ae91ce917], 
PUP.Optional.Vitruvian.A, C:\Users\Lucas\AppData\Local\Temp\VITRUVIAN-INSTALLER-SOFTWAREREGKEYS-V0002, In Quarantäne, [b23ec21c9af0b87e50f6018bcc39e21e], 
PUP.Optional.Vitruvian.A, C:\Users\Lucas\AppData\Local\Temp\VITRUVIAN-INSTALLER-UNINSTALL-V0002, In Quarantäne, [7d7368764347f6402f174745d92c8f71], 
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}\Download.dat, In Quarantäne, [4ca4b92592f8da5c85b243503dc849b7], 
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}\7039bb7990034be9, Löschen bei Neustart, [4ca4b92592f8da5c85b243503dc849b7], 
PUP.Optional.Multiplug.Gen, C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}\bdc41d2cb7d7ac3d, Löschen bei Neustart, [4ca4b92592f8da5c85b243503dc849b7], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\nsfD66C.tmp, In Quarantäne, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\jnsyE35B.tmp, Löschen bei Neustart, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\knszDDD4.tmp, Löschen bei Neustart, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\rnstDE58.exe, In Quarantäne, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\Uninstall.exe, In Quarantäne, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432111985-11E3-B710-42083202C0FF\vnsd696B.tmp, In Quarantäne, [a64a87570f7b67cf2b150d86d233c63a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\knsoD1D.tmp, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\hnsiEA4F.tmp, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\jnsi9809.tmp, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\knsj93A4.tmp, Löschen bei Neustart, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\knsp9C30.tmp, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\knsq948F.tmp, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\Uninstall.exe, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1434968542-11E3-B710-42083202C0FF\vnsiCD7D.tmp, In Quarantäne, [aa46a33ba2e86bcbae922c67867f639d], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432112989-11E3-B710-42083202C0FF\vnsd499D.tmp, In Quarantäne, [965a3da18bffbc7a5ae7c1d225e0e21e], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1432112989-11E3-B710-42083202C0FF\Uninstall.exe, In Quarantäne, [965a3da18bffbc7a5ae7c1d225e0e21e], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\hnsn2166.tmp, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\jnsnF44C.tmp, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knsb4F08.tmp, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knsl29AA.tmp, In Quarantäne, [519f8559acde65d186bbfc97b74e768a],
         

__________________
Beste Grüße,

Kuhlambo12

Alt 14.07.2015, 02:11   #21
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Code:
ATTFilter
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knsp4470.tmp, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knssD725.tmpfs, Löschen bei Neustart, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knstF614.tmp, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\knsx2AE2.tmp, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\rnsiEC3D.exe, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\Uninstall.exe, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.MultiPlug.Gen, C:\Users\Lucas\AppData\Roaming\EBBA837F-1435912091-11E3-B710-42083202C0FF\vnsnB942.tmp, In Quarantäne, [519f8559acde65d186bbfc97b74e768a], 
PUP.Optional.Browser.A, C:\ProgramData\Browser\PROMPT.EXE.CONFIG, In Quarantäne, [8967a43a82084ceadcb64054ef168d73], 
PUP.Optional.SuperOptimizer.A, C:\ProgramData\{254217e2-f341-d2cd-2542-217e2f345f8b}\HQGHUMEAYLNLF.DAT, In Quarantäne, [e40cf8e68dfd221416cf475133d2db25], 
PUP.Optional.SuperOptimizer.A, C:\ProgramData\{254217e2-f341-d2cd-2542-217e2f345f8b}\1f2d8a6a8506ce9e, In Quarantäne, [e40cf8e68dfd221416cf475133d2db25], 
PUP.Optional.SuperOptimizer.A, C:\ProgramData\{254217e2-f341-d2cd-2542-217e2f345f8b}\d2d02c3fa2d2294a, In Quarantäne, [e40cf8e68dfd221416cf475133d2db25], 
PUP.Optional.Multiplug.A, C:\Windows\System32\Tasks\BIDAILY SYNCHRONIZE TASK[3C32], In Quarantäne, [8f61b22c9befe84e205abddca95caf51], 
PUP.Optional.Multiplug.A, C:\Windows\System32\Tasks\BIDAILY SYNCHRONIZE TASK[8DA6], In Quarantäne, [41af04da127872c4b5c5bcdd5da87d83], 
PUP.Optional.Multiplug.A, C:\Windows\System32\Tasks\BIDAILY SYNCHRONIZE TASK[IN], In Quarantäne, [46aaa638dab02e08fe7cc0d990751de3], 
PUP.Optional.Multiplug.A, C:\Windows\Tasks\BIDAILY SYNCHRONIZE TASK[3C32].JOB, In Quarantäne, [945cefefc2c87abc6912990017ee8e72], 
PUP.Optional.Multiplug.A, C:\Windows\Tasks\BIDAILY SYNCHRONIZE TASK[8DA6].JOB, In Quarantäne, [5e9203db5139eb4b4c2ffa9f17ee33cd], 
PUP.Optional.Multiplug.A, C:\Windows\Tasks\BIDAILY SYNCHRONIZE TASK[IN].JOB, In Quarantäne, [09e7e0fec0ca6acc4d2ececb35d031cf], 
PUP.Optional.Abengine.A, C:\Users\Lucas\AppData\Local\Temp\LENGINE.INI.LOG, In Quarantäne, [10e0e5f9523877bfc5f40a8f986d5ca4], 
PUP.Optional.SearchModule.A, C:\Windows\System32\Tasks\SMWUpd, In Quarantäne, [737d8c52800a1d19769b94077a8b7d83], 
PUP.Optional.OptimizerPro.A, C:\Users\Lucas\Documents\Optimizer Pro\COOKIESEXCEPTION.TXT, In Quarantäne, [1bd5a13dc5c5df57c496900b42c333cd], 
PUP.Optional.BubbleSound.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0\UNINSTALL.LNK, In Quarantäne, [c927776716740630871908948b7aa858], 
PUP.Optional.WordShark.A, C:\Windows\System32\Tasks\WORDSHARK AUTO UPDATER 1.10.0.19 CORE, In Quarantäne, [9c541ac46c1efa3c49d5a7f709fcea16], 
PUP.Optional.WordShark.A, C:\Windows\System32\Tasks\WORDSHARK AUTO UPDATER 1.10.0.19 PENDING UPDATE, In Quarantäne, [ed035688f991f343918d58468382b54b], 
PUP.Optional.Convert, C:\Users\Lucas\AppData\Roaming\PDFConvert\tosty.dat, In Quarantäne, [5f919e40355570c665f2f7a77b8a2fd1], 
PUP.Optional.Convert, C:\Users\Lucas\AppData\Roaming\PDFConvert\SWUpdate.exe, In Quarantäne, [5f919e40355570c665f2f7a77b8a2fd1], 
PUP.Optional.WinKit, C:\Windows\System32\Tasks\WinKit, In Quarantäne, [628e6b73f298b87e3226247a1fe6a25e], 
PUP.Optional.Winsta, C:\Windows\System32\Tasks\WINSTA UPDATE, In Quarantäne, [db15fae45e2c9f976eeb128cff0611ef], 
PUP.Optional.DesktopSearch.A, C:\ProgramData\DesktopSearch\DESKTOPSEARCH.EXE.CONFIG, In Quarantäne, [f1ff28b6abdf5adcbc7d405f0500c040], 
PUP.Optional.DesktopSearch.A, C:\ProgramData\DesktopSearch\DesktopSearch.ico, In Quarantäne, [f1ff28b6abdf5adcbc7d405f0500c040], 
PUP.Optional.DesktopSearch.A, C:\ProgramData\DesktopSearch\uninstall.exe.config, In Quarantäne, [f1ff28b6abdf5adcbc7d405f0500c040], 
PUP.Optional.DeskTopSearch.A, C:\Users\Lucas\AppData\Local\DesktopSearch\data2.dat, In Quarantäne, [b13fd40a286284b2ae673967dc29b749], 
PUP.Optional.WombatService.A, C:\ProgramData\Service1104\SERVICE1104.DLL, In Quarantäne, [17d929b5c2c8b77f0758cfd1a263b947], 
PUP.Optional.WombatService.A, C:\ProgramData\Service1104\SERVICE1104.EXE, In Quarantäne, [06ea845a058561d5233c4d53798c2bd5], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse\1.0.1.0\GAWRUFIA.EXE.CONFIG, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse\1.0.1.0\gawrufia.exe, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse\1.0.1.0\sqlite3.dll, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse\1.0.1.0\time.dat, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Evoemdreexse\dat.dat, In Quarantäne, [b63aba24385286b0adecd2ce5fa6cd33], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Vroifhit\1.0.1.0\IRPNAXNA.EXE.CONFIG, In Quarantäne, [5799647a39518ea8d6c3425ed82d19e7], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Vroifhit\1.0.1.0\irpnaxna.exe, In Quarantäne, [5799647a39518ea8d6c3425ed82d19e7], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Vroifhit\1.0.1.0\sqlite3.dll, In Quarantäne, [5799647a39518ea8d6c3425ed82d19e7], 
PUP.Optional.PullUpdate.Gen, C:\ProgramData\Vroifhit\dat.dat, In Quarantäne, [5799647a39518ea8d6c3425ed82d19e7], 
PUP.Optional.DeskBar.A, C:\Users\Lucas\AppData\Local\DeskBar\DBUNINSTALL.EXE, In Quarantäne, [c729657965258bab1ce53d64818448b8], 
PUP.Optional.DeskBar.A, C:\Users\Lucas\AppData\Local\DeskBar\dblaunch.exe, In Quarantäne, [c729657965258bab1ce53d64818448b8], 
PUP.Optional.DeskBar.A, C:\Users\Lucas\AppData\Local\DeskBar\2.0.1.1625\DeskBar.exe, In Quarantäne, [c729657965258bab1ce53d64818448b8], 
PUP.Optional.PullUpdate.A, C:\ProgramData\Radio\PROMPT.EXE.CONFIG, In Quarantäne, [36ba13cbafdbdb5b76b1dbc6b3522ad6], 
PUP.Optional.DesktopSearch.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search\UNINSTALL DESKTOP SEARCH.LNK, In Quarantäne, [e907c5195b2f64d23b11119059ac4eb2], 
PUP.Optional.DesktopSearch.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search\Desktop Search FAQ.lnk, In Quarantäne, [e907c5195b2f64d23b11119059ac4eb2], 
PUP.Optional.DesktopSearch.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Desktop Search\Desktop Search.lnk, In Quarantäne, [e907c5195b2f64d23b11119059ac4eb2], 
PUP.Optional.3DBubbleSound.A, C:\Program Files\BubbleSound\3D BUBBLESOUND.EXE, Löschen bei Neustart, [1ad601dd276383b3c3c9837d0bf9d828], 
PUP.Optional.Goobzo.A, C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe, Löschen bei Neustart, [04ecf2ec6f1b63d3794c2773d72e6898], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, In Quarantäne, [24ccb12d0486ac8a3949d20ce1226d93], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdate.exe, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateBroker.exe, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateCrashHandler.exe, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateHelper.msi, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateOnDemand.exe, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, In Quarantäne, [0de3449a5f2b55e1f2b4e2fdd72cbf41], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.197592\globalupdateHelper.msi, In Quarantäne, [846cf7e795f59b9b2d92825d9b68946c], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.216344\globalupdateHelper.msi, In Quarantäne, [b33d6c72d4b61f17437c4d92bf44cc34], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.243306\globalupdateHelper.msi, In Quarantäne, [b73976681c6eee48516e8e5140c332ce], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.285380\globalupdateHelper.msi, In Quarantäne, [816f00deb6d40f27427d419edc277a86], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.301755\globalupdateHelper.msi, In Quarantäne, [be323ca2167454e2ba05885743c038c8], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.317450\globalupdateHelper.msi, In Quarantäne, [a050c31bfc8ee45209b6cb1411f27888], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.333724\globalupdateHelper.msi, In Quarantäne, [bf313f9f1a7096a0a51a914e55aeeb15], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.335467\globalupdateHelper.msi, In Quarantäne, [e40cfce251392511dde218c78a7945bb], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.365270\globalupdateHelper.msi, In Quarantäne, [18d84d9196f44ceab20dc31c4fb46b95], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.372103\globalupdateHelper.msi, In Quarantäne, [47a98e505d2d0432912e736c60a3b34d], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.399206\globalupdateHelper.msi, In Quarantäne, [549cecf2ee9ccd690bb4e7f87d861be5], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.407792\globalupdateHelper.msi, In Quarantäne, [8e62c21c9febdc5aecd3fee153b0718f], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.46373\globalupdateHelper.msi, In Quarantäne, [559b449a46445ed8caf53ca3ab58bb45], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.6686\globalupdateHelper.msi, In Quarantäne, [f6fa3ca27d0dff37e5da6e710af952ae], 
PUP.Optional.GlobalUpdate.A, C:\Users\Lucas\AppData\Local\Temp\comh.89442\globalupdateHelper.msi, In Quarantäne, [f9f7d30b454548eead126d72ed16e11f], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\SBIEBrowserHelperObject.dll, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\Search.lnk, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\sma.exe, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smci32.dll, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smci64.dll, Löschen bei Neustart, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smi32.exe, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smi64.exe, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\smp.exe, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\SMUninstall.exe, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\Updater.exe, In Quarantäne, [c927b32b88027db9c1f3756fbf4431cf], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici32.dll, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, Löschen bei Neustart, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiu.exe, Löschen bei Neustart, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, In Quarantäne, [46aac915f199fa3c08b30fd5de25a759], 
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\config.json, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\database1_0_0.ej, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro.dll, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\SHOPPERPRO64.DLL, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\spbihe.js, In Quarantäne, [529edfff1d6d082e4575697c72918e72], 
PUP.Optional.GamesDesktop.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP\GamesDesktop.lnk, In Quarantäne, [ee02eef01773c0763f47f2fdf40fa858], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010014.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010015.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010017.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010018.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010020.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010022.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010023.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\upgmsd_de_005010024.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\user_profil.cyp, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\gmsd_de_005010014\1.20\cnf.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010014\gmsd_de_005010014\1.20\eorezo.cyl, In Quarantäne, [23cd845a890174c21c6bc827a06353ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010015\gmsd_de_005010015\1.20\cnf.cyl, In Quarantäne, [0ee286587b0fca6c1b6c4da255aee11f], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010015\gmsd_de_005010015\1.20\eorezo.cyl, In Quarantäne, [0ee286587b0fca6c1b6c4da255aee11f], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010017\gmsd_de_005010017\1.20\cnf.cyl, In Quarantäne, [915f97475337b77f295eb33cee158f71], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010017\gmsd_de_005010017\1.20\eorezo.cyl, In Quarantäne, [915f97475337b77f295eb33cee158f71], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010018\gmsd_de_005010018\1.20\cnf.cyl, In Quarantäne, [68882ab41a70bb7bb4d3c728a85b7789], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010018\gmsd_de_005010018\1.20\eorezo.cyl, In Quarantäne, [68882ab41a70bb7bb4d3c728a85b7789], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010020\gmsd_de_005010020\1.20\cnf.cyl, In Quarantäne, [569a09d52e5c1b1b3750f7f85ba853ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010020\gmsd_de_005010020\1.20\eorezo.cyl, In Quarantäne, [569a09d52e5c1b1b3750f7f85ba853ad], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010022\gmsd_de_005010022\1.20\cnf.cyl, In Quarantäne, [e30d04da2a60cf67bdcaa14e16edf20e], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010022\gmsd_de_005010022\1.20\eorezo.cyl, In Quarantäne, [e30d04da2a60cf67bdcaa14e16edf20e], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010023\gmsd_de_005010023\1.20\cnf.cyl, In Quarantäne, [02ee4599b4d604324344f6f9b74cee12], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010023\gmsd_de_005010023\1.20\eorezo.cyl, In Quarantäne, [02ee4599b4d604324344f6f9b74cee12], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010024\gmsd_de_005010024\1.20\cnf.cyl, In Quarantäne, [cd23419dc6c494a2dcab737c60a3dc24], 
PUP.Optional.GamesDesktop.A, C:\Users\Lucas\AppData\Local\gmsd_de_005010024\gmsd_de_005010024\1.20\eorezo.cyl, In Quarantäne, [cd23419dc6c494a2dcab737c60a3dc24], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010014\unins000.dat, In Quarantäne, [886805d97515e2545533c728a26105fb], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010014\unins000.msg, In Quarantäne, [886805d97515e2545533c728a26105fb], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010015\unins000.dat, In Quarantäne, [24cc7b63aae0a4926a1ee6098f74c23e], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010015\unins000.msg, In Quarantäne, [24cc7b63aae0a4926a1ee6098f74c23e], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010017\unins000.dat, In Quarantäne, [0ce45a84890138fed8b0618e768dfe02], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010017\unins000.msg, In Quarantäne, [0ce45a84890138fed8b0618e768dfe02], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010018\unins000.dat, In Quarantäne, [04ec5b83b1d95bdb8cfc8c635ea5ad53], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010018\unins000.msg, In Quarantäne, [04ec5b83b1d95bdb8cfc8c635ea5ad53], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010020\unins000.dat, In Quarantäne, [b43cc519e4a66cca4444d9166a99f40c], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010020\unins000.msg, In Quarantäne, [b43cc519e4a66cca4444d9166a99f40c], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010022\unins000.dat, In Quarantäne, [f5fb0fcfff8ba78fcabe21cec53ea65a], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010022\unins000.msg, In Quarantäne, [f5fb0fcfff8ba78fcabe21cec53ea65a], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010023\unins000.dat, In Quarantäne, [15dbf1edbecc7eb893f599566d96659b], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010023\unins000.msg, In Quarantäne, [15dbf1edbecc7eb893f599566d96659b], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010024\unins000.dat, In Quarantäne, [6f81bd219af0c96daade579837cc659b], 
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_de_005010024\unins000.msg, In Quarantäne, [6f81bd219af0c96daade579837cc659b], 
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml, In Quarantäne, [23cdb22cbad0f442793e48b1709308f8], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup\AnyProtect.lnk, In Quarantäne, [638d6777afdb8ea83b9159a0ad564fb1], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup\Uninstall.lnk, In Quarantäne, [638d6777afdb8ea83b9159a0ad564fb1], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\installer\ab.test.json, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\installer\tempfile.t, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\language\de.xml, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\language\en.xml, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\language\fr.xml, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\scan_results\aps.scan.quick.results, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\scan_results\aps.scan.results, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\swf\mov01.swf, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.AnyProtect.A, C:\Users\Lucas\AppData\Roaming\AnyProtectEx\swf\swfP4.swf, In Quarantäne, [19d7b529800ae155824bf7027f84d52b], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\chrome.dat, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\master_preferences, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\short.json, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\VisualElementsManifest.xml, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\39.6.2171.95.manifest, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_100_percent.pak, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_200_percent.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\chrome_child.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\crosslog_6484.log, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\crosslog_7208.log, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\d3dcompiler_46.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\delegate_execute.exe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\ffmpegsumo.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\icudtl.dat, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libexif.dll, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libglesv2.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\metro_driver.dll, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\nacl64.exe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\nacl_irt_x86_32.nexe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\nacl_irt_x86_64.nexe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\pdf.dll, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\resources.pak, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\secondarytile.png, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Extensions\external_extensions.json, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrome.7z, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\setup.exe, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\hi.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\am.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ar.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\bg.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\bn.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ca.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\cs.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\da.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\de.pak, Löschen bei Neustart, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\el.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\en-GB.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\en-US.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\es-419.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\es.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\et.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\fa.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\fi.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\fil.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\fr.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\gu.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\he.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\hr.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\hu.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\id.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\it.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ja.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\kn.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ko.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\lt.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\lv.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ml.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\mr.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ms.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\nb.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\nl.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\pl.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\pt-BR.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\pt-PT.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ro.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ru.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\sk.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\sl.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\sr.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\sv.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\sw.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\ta.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\te.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\th.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\tr.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\uk.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\vi.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\zh-CN.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales\zh-TW.pak, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\PepperFlash\manifest.json, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\PepperFlash\pepflashplayer.dll, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\VisualElements\logo.png, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\VisualElements\smalllogo.png, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\VisualElements\splash-620x300.png, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\google_translate.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\9gag.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\agoda.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\amazon.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\bbc.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\bestbuy.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\bing.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\booking.com.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\cnn.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\ebay.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\espn.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\etsy.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\expedia.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\facebook.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\forbes.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\gizmodo.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\gmail.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\google_news.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\google_plus.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\groupom.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\hotels.com.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\huffingtonpost.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\icon.json, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\ikea.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\imdb.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\kayak.com.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\linkedin.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\mail.ru.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\mail_live_msn.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\msn.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\nba.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\netflix.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\nfl.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\nytimes.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\pinterest.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\priceline.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\reddit.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\search.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\skype.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\target.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\ted.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\theguardian.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\tripadvisor.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\tumblr.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\twitter.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\walmart.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\weather_channel.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\wikipedia.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\yahoo.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\yahoo_finance.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\yahoo_mail.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\yahoo_search.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\yandex.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\yelp.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons\youtube.ico, In Quarantäne, [965aa13d12788ea8f6048b6e7093cf31], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\chrome.dat, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\First Run, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Local State, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\lockfile, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cookies, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cookies-journal, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Current Session, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Current Tabs, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Cookies, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Cookies-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Favicons, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Favicons-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Google Profile.ico, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History Provider Cache, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History-journal, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Last Session, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Last Tabs, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Login Data, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Login Data-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Network Action Predictor, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Network Action Predictor-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Origin Bound Certs, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Origin Bound Certs-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Preferences, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\QuotaManager, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\QuotaManager-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\README, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Secure Preferences, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Shortcuts, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Shortcuts-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Top Sites, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Top Sites-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\TransportSecurity, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Visited Links, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Web Data, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Web Data-journal, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000019.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000045.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000048.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000049.log, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOCK, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG.old, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000047, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_1, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_2, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_3, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000001, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000003, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000004, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000005, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000006, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000007, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000008, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000009, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000a, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\index, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases\Databases.db, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases\Databases.db-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases\https_de.aion.gameforge.com_0\2, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases\http_de.tera.gameforge.com_0\1, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules\000023.log, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules\CURRENT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules\LOCK, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules\LOG, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules\LOG.old, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules\MANIFEST-000022, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\000042.ldb, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\000044.ldb, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\000047.ldb, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\000050.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\000051.log, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\CURRENT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\LOCK, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\LOG, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\LOG.old, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State\MANIFEST-000049, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\background.html, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\manifest.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\bar-bkg.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\bar-main.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\bar-shadow.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\exticon128.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\exticon16.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\exticon48.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\highlighter.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainadd.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainbkg.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainimg.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainimg_no.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainimg_ok.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainmact.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\images\mainxchg.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\js\background.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\js\bgdog.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\js\codog.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\js\dogcss.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\js\jquery.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\bg\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ca-ES\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\cs\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\da\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\de\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\el\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\en\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\es\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\eu-ES\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\fi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\fr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\it\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ja\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ko\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\nl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\no\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\pl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\pt-BR\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\pt-PT\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ro\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\ru\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\sl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\sv\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\tr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\zh-Hans\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab\1.3.0.5563_0\_locales\zh-Hant\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_background.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_window.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\manifest.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css\craw_window.css, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html\craw_window.html, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\flapper.gif, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_128.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_16.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_close.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_hover.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_maximize.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_pressed.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata\verified_contents.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\about.html, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\about_ltr_css.css, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\about_rtl_css.css, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\about_with_deps.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\background.html, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\background_with_deps.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\in-document-message_content_script.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\in-document-start_content_script.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\in-document_content_script.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\in-document_ltr_css.css, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\in-document_rtl_css.css, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\in-search-results_content_script.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\jquery_do_not_compile.js, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\manifest.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\close.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\close_on.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\help.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\help_on.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\icon128x128.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\icon16x16.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\icon19x19.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\icon32x32.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\icon48x48.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\minimize.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\minimize_on.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\number_1.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\number_2.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\number_3.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-active.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_0.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_1.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_2.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_3.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_4.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_5.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_6.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-animated_7.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\page-action-inactive.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\step_1.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\step_2.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\images\step_3.png, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ar\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\bg\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ca\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\cs\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\da\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\de\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\el\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\en\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\en_GB\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\es\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\es_419\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03],
         
__________________
--> Windows 8 & Windows 7 Laptop beide stark Adware verseucht

Alt 14.07.2015, 02:13   #22
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Code:
ATTFilter
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\et\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\fi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\fil\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\fr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\he\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\hi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\hr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\hu\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\id\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\it\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ja\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ko\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\lt\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\lv\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\nb\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\nl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\pl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\pt_BR\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\pt_PT\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ro\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\ru\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sk\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sl\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\sv\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\th\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\tr\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\uk\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\vi\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\zh_CN\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_locales\zh_TW\messages.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc\2.2.2_0\_metadata\verified_contents.json, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_1, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_2, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_3, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\index, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIcons\3690.tmp, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIcons\3691.tmp, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIconsOld\B4E9.tmp, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIconsOld\B4EA.tmp, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_bh.contextweb.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_d3kjggt7tl9go7.cloudfront.net_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_d3kjggt7tl9go7.cloudfront.net_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_de.aion.gameforge.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_de.aion.gameforge.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.sunmaker.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.sunmaker.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.sunnyplayer.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.sunnyplayer.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.youtube.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_065b42ba2b.se_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_065b42ba2b.se_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_ads.adplxmd.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_ads.adplxmd.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_bh.contextweb.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_de.elsword.gameforge.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_de.elsword.gameforge.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_de.ogame.gameforge.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_de.ogame.gameforge.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_de.tera.gameforge.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_de.tera.gameforge.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_engine.trklnks.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_engine.trklnks.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_lp.stargames.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_lp.stargames.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_n44adshostnet.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_n44adshostnet.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_onclickads.net_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_onclickads.net_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_popmyads.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_popmyads.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_pstatic.eshopcomp.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_pstatic.eshopcomp.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_t2.junbi-tracker.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_t2.junbi-tracker.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_the-binary-trader.biz_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_the-binary-trader.biz_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_wwa.parwise.de_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_wwa.parwise.de_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.improveyourpc.today_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.improveyourpc.today_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.kbdadsfast.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.kbdadsfast.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.online-casino.de_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.online-casino.de_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.premierdownloadmanager.com_0.localstorage, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\http_www.premierdownloadmanager.com_0.localstorage-journal, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\data_0, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\data_1, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\data_2, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\data_3, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\f_000001, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\f_000002, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\f_000003, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\f_000004, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Media Cache\index, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\settings.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com\settings.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#partners.cmptch.com\settings.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\macromedia.com\support\flashplayer\sys\#www.ajaxcdn.org\settings.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\mpsnare.iesnare.com\stm.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\4MXGGBPE\www.ajaxcdn.org\swf.swf\dm_cookie.sol, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000040.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000042.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000045.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000048.ldb, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000049.log, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\CURRENT, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\LOCK, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\LOG, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\LOG.old, In Quarantäne, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\Users\Lucas\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\MANIFEST-000047, Löschen bei Neustart, [24cce0fe88026accd02cac4d24dffd03], 
PUP.Optional.Crossbrowse.C, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse\Crossbrowse.lnk, In Quarantäne, [708000de11790b2b42bbaf4a09fa827e], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\terms-of-service.rtf, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\buildcrx-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\Info-ZIP-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\JSON-simple-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\nsJSON-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\Nustache-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\TaskScheduler-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\UAC-license.txt, In Quarantäne, [6987c21cfc8e47efbc94f208b94aae52], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\BubbleSound.dll, Löschen bei Neustart, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\silentinstaller.exe, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\silentuninstaller.exe, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\Uninstall.exe, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\config\3DBubbleSound.conf, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\config\3DBubbleSound.err, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.BubbleSound.A, C:\Program Files\BubbleSound\config\3DBubbleUser.conf, In Quarantäne, [0ce4d00e3f4bd85e52fe03fa0ff418e8], 
PUP.Optional.AnyProtect.A, C:\Program Files (x86)\AnyProtectEx\product.guid, In Quarantäne, [c12f9648a3e739fd399fed1024df29d7], 
PUP.Optional.AnyProtect.A, C:\Program Files (x86)\AnyProtectEx\Uninstall.exe, In Quarantäne, [c12f9648a3e739fd399fed1024df29d7], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\CmdShell.exe, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\conf, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\ffsearch_toolbar!1.0.0.1031.xpi, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\HPNotify.exe, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\IeWatchDog.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\install.data, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcp110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\msvcr110.dll, Löschen bei Neustart, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\searchProvider.xml, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\uninstall.exe, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\about.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\about_bk.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\btn.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\btn_apply.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\close.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\conf.xml, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\conf_back.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\input_bk.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\logo.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\main.xml, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\radio_1.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\radio_2.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\rigth_arrow.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\skin\settings.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\data.html, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\indexIE.html, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\indexIE8.html, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\main.css, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\ver.txt, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img\google_trends.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img\icon128.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img\icon16.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img\icon48.png, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img\loading.gif, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\img\logo32.ico, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\common.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\ga.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\jquery.autocomplete.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\jquery.xdomainrequest.min.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\js.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\library.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\xagainit-ie8.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\xagainit2.0.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\js\xdomain.min.js, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\en-US\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-419\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\es-ES\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-BE\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CA\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-CH\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-FR\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\fr-LU\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-CH\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\it-IT\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pl\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\pt-BR\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\ru-MO\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\tr-TR\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\vi-VI\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-CN\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.MiuiTab.A, C:\Program Files (x86)\MiuiTab\web\_locales\zh-TW\messages.json, In Quarantäne, [8f61eef04644979f7765f904b44fe21e], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\terms-of-service.rtf, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\buildcrx-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\Info-ZIP-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\JSON-simple-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\nsJSON-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\Nustache-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\TaskScheduler-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\3rd Party Licenses\UAC-license.txt, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Update\Microsoft.Win32.TaskScheduler.dll, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Update\Nustache.Core.dll, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Update\WordSharkAutoUpdateClient.exe, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.WordShark.A, C:\Program Files (x86)\WordShark_1.10.0.19\Update\WordSharkAutoUpdateClient.exe.config, In Quarantäne, [ee02508eb4d68da91de715e936cd6898], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\ghostman_48x48.ico, In Quarantäne, [ee028b53dbaf67cfe940817d41c2956b], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\install.log, In Quarantäne, [ee028b53dbaf67cfe940817d41c2956b], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\MyGames_48x48.ico, In Quarantäne, [ee028b53dbaf67cfe940817d41c2956b], 
PUP.Optional.TomorrowGames.A, C:\ProgramData\TomorrowGames\SoftConfigTest.exe, In Quarantäne, [ee028b53dbaf67cfe940817d41c2956b], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\domain, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\expirationDate, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\hotsearch, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\hotsearch_uptime, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\name, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\path, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\set_country, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\set_z, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\TABts, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\uid, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\url, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.SupTab.A, C:\Users\Lucas\SupTab\_ver, In Quarantäne, [23cdf6e844469c9a187d14ea0ff4f907], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\dat\rSAtaR.exe.config, Löschen bei Neustart, [45abb9251e6cd363a0049bfbe620817f], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\dat\xSLUKTZwZnf.exe.config, Löschen bei Neustart, [45abb9251e6cd363a0049bfbe620817f], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\info.dat, Löschen bei Neustart, [45abb9251e6cd363a0049bfbe620817f], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\xpvrBXqvyb.dat, Löschen bei Neustart, [45abb9251e6cd363a0049bfbe620817f], 
PUP.Optional.PullUpdate.A, C:\ProgramData\dCrfrhlREiq\xpvrBXqvyb.exe.config, In Quarantäne, [45abb9251e6cd363a0049bfbe620817f], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

adwCleaner:

Code:
ATTFilter
# AdwCleaner v4.207 - Bericht erstellt 07/07/2015 um 21:00:36
# Aktualisiert 21/06/2015 von Xplode
# Datenbank : 2015-07-05.2 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : Lucas - LUCAS-HP
# Gestarted von : C:\Users\Lucas\Desktop\AdwCleaner_4.207.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\DesktopSearch
Ordner Gelöscht : C:\ProgramData\Browser
Ordner Gelöscht : C:\ProgramData\MailUpdate
Ordner Gelöscht : C:\ProgramData\a2bad83000002e1f
Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
Ordner Gelöscht : C:\Program Files (x86)\YTDownloader
Ordner Gelöscht : C:\Program Files (x86)\Convertor
Ordner Gelöscht : C:\Program Files (x86)\FastSearch
Ordner Gelöscht : C:\Program Files (x86)\CouponsPlus
Ordner Gelöscht : C:\Program Files (x86)\Winsta
Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\speed browser
Ordner Gelöscht : C:\Users\Lucas\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Lucas\AppData\LocalLow\SmartWeb
Ordner Gelöscht : C:\Users\Lucas\AppData\Roaming\MailUpdate
Ordner Gelöscht : C:\Users\Lucas\AppData\Roaming\Convertor
Ordner Gelöscht : C:\Users\Lucas\AppData\Roaming\jellylam
Ordner Gelöscht : C:\Users\Lucas\AppData\Roaming\Winsta
Ordner Gelöscht : C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files\Common Files\System\SysMenu.dll
Datei Gelöscht : C:\Program Files\Common Files\System\SysMenu64.dll
Datei Gelöscht : C:\Users\Lucas\Desktop\Continue Live Installation.lnk
Datei Gelöscht : C:\Users\Lucas\Desktop\YTDownloader.lnk

***** [ Geplante Tasks ] *****

Task Gelöscht : Convertor
Task Gelöscht : Inst_Rep
Task Gelöscht : ShopperPro
Task Gelöscht : ShopperProJSUpd
Task Gelöscht : SmartWeb Upgrade Trigger Task
Task Gelöscht : Smp
Task Gelöscht : SPDriver
Task Gelöscht : WinKit
Task Gelöscht : YTDownloader
Task Gelöscht : YTDownloaderUpd
Task Gelöscht : amiupdaterExd
Task Gelöscht : amiupdaterExi
Task Gelöscht : DriverMgr
Task Gelöscht : keepup
Task Gelöscht : Winsta Update

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Lucas\Desktop\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Search.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Wert Gelöscht : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\YTDownloader.exe
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
Wert Gelöscht : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
Wert Gelöscht : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
Wert Gelöscht : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
Schlüssel Gelöscht : HKLM\SOFTWARE\7b12d74b-5599-f620-2147-5dff37dcd48b
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A2970C7C-8392-4E6F-8B51-B763CF38E13C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8BB736A5-5657-4B96-9CFF-4F19318E6F05}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A1965763-A486-4E1E-B574-19E44B3842E8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A2970C7C-8392-4E6F-8B51-B763CF38E13C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}
Wert Gelöscht : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Schlüssel Gelöscht : HKCU\Software\AnyProtect
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\Tutorials
Schlüssel Gelöscht : HKCU\Software\YTDownloader
Schlüssel Gelöscht : HKCU\Software\Linkey
Schlüssel Gelöscht : HKCU\Software\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}
Schlüssel Gelöscht : HKCU\Software\Kromtech
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartWeb
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\SpeedBrowser
Schlüssel Gelöscht : HKLM\SOFTWARE\YTDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchModule
Schlüssel Gelöscht : HKLM\SOFTWARE\SpeedBit
Schlüssel Gelöscht : HKLM\SOFTWARE\AIM Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\searchult
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YTDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\ShopperPro
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\BubbleSound
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\SearchModule
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17840


*************************

AdwCleaner[R0].txt - [32173 Bytes] - [27/06/2015 11:00:36]
AdwCleaner[R1].txt - [10644 Bytes] - [07/07/2015 20:58:48]
AdwCleaner[S0].txt - [28143 Bytes] - [27/06/2015 11:01:59]
AdwCleaner[S1].txt - [9930 Bytes] - [07/07/2015 21:00:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9989  Bytes] ##########
         
__________________
Beste Grüße,

Kuhlambo12

Alt 14.07.2015, 02:17   #23
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.3.5 (07.07.2015:2)
OS: Windows 7 Professional x64
Ran by Lucas on 07.07.2015 at 21:08:10,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\Lucas\AppData\Roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\search.lnk



~~~ Folders

Successfully deleted: [Folder] C:\Users\Lucas\appdata\local\crashrpt
Successfully deleted: [Folder] C:\Users\Lucas\appdata\local\installer
Successfully deleted: [Folder] C:\Users\Lucas\appdata\locallow\company
Successfully deleted: [Folder] C:\ProgramData\17965288980408272027
Successfully deleted: [Folder] C:\ProgramData\19a87fa1ec024bbcbb41931263354405
Successfully deleted: [Folder] C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066
Successfully deleted: [Folder] C:\ProgramData\Service1104
Successfully deleted: [Folder] C:\Users\Lucas\appdata\local\D8B691CC-63CA-4FEC-B822-B342242FFE81





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.07.2015 at 21:09:53,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

EEK:
Code:
ATTFilter
Emsisoft Emergency Kit - Version 10.0
Letztes Update: 13.07.2015 08:35:39
Benutzerkonto: Lucas-HP\Lucas

Scan-Einstellungen:

Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	13.07.2015 08:35:55
Key: HKEY_USERS\.DEFAULT\SOFTWARE\APPDATALOW\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} 	Gefunden: Application.Bundle (A)
Key: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\APPDATALOW\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} 	Gefunden: Application.Bundle (A)
Key: HKEY_USERS\S-1-5-18\SOFTWARE\APPDATALOW\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} 	Gefunden: Application.Bundle (A)
Value: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR 	Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS 	Gefunden: Setting.DisableRegistryTools (A)
Key: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-500\SOFTWARE\INSTALLEDBROWSEREXTENSIONS 	Gefunden: Application.Win32.InstallAd (A)
Key: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86} 	Gefunden: Application.AdShort (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86} 	Gefunden: Application.AdShort (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} 	Gefunden: Application.AdFix (A)
C:\ProgramData\utk\305D155958294E25AAB3BDE800DED314\setup.exe 	Gefunden: Application.InstallAd (A)
C:\ProgramData\utk\7B0BB8A94AA2468AB7D160D8D2994ACC\setup.exe 	Gefunden: Application.InstallAd (A)
C:\ProgramData\utk\FBDEEF3D8DDA4BD6B8CF1D1E5BD154F7\setup.exe 	Gefunden: Application.InstallAd (A)
C:\Users\Lucas\AppData\Local\Temp\3D70\temp\priceless_p_soft_partner.exe 	Gefunden: Gen:Variant.Adware.Kazy.618288 (B)
C:\Users\Lucas\AppData\Local\Temp\1AB8\temp\SuperFinder.xyz.exe 	Gefunden: Gen:Variant.Adware.Kazy.554588 (B)
C:\Users\Lucas\AppData\Local\Temp\494AED28-3F63-30C5-B1DD-69EC66D69817.exe 	Gefunden: Gen:Variant.Adware.Zusy.139190 (B)
C:\Users\Lucas\AppData\Local\Temp\3D70\temp\TyHelpTFUO.xyz.exe 	Gefunden: Gen:Variant.Adware.Kazy.554588 (B)
C:\Users\Lucas\AppData\Local\Temp\9F072BAC-27D5-388A-006E-59A449975137.exe 	Gefunden: Gen:Variant.Adware.Kazy.592387 (B)
C:\Users\Lucas\AppData\Local\Temp\DwlTempFolder\temp.exe 	Gefunden: Trojan.GenericKD.2493724 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd1534.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd1C08.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd2E7F.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd3294.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd385E.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd39D5.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd3E96.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd4402.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd477B.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd48C3.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd49EB.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd59E2.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd5C81.exe 	Gefunden: Application.Generic.1349389 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd7271.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd816F.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd8269.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd82C6.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd83B0.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd8890.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdA524.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdA563.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdC4F4.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdD661.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdE5AD.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdE87A.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdEA.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdEC42.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdF382.exe 	Gefunden: Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\Install_13406\setter.dll 	Gefunden: Trojan.GenericKD.2441517 (B)
C:\Users\Lucas\AppData\Local\Temp\is45637729\1453213_stp\icc.dll 	Gefunden: Application.Downloader (A)
C:\Users\Lucas\AppData\Local\Temp\n4920\gusetup_pub.exe 	Gefunden: Trojan.GenericKD.2491800 (B)
C:\Users\Lucas\AppData\Local\Temp\nsa6AD6.tmp\setup.exe 	Gefunden: Dropped:Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nsb9C46.tmp 	Gefunden: Trojan.GenericKD.2554439 (B)
C:\Users\Lucas\AppData\Local\Temp\nsc1BE1.tmp 	Gefunden: Trojan.GenericKD.2476647 (B)
C:\Users\Lucas\AppData\Local\Temp\nscAEBD.tmp 	Gefunden: Trojan.GenericKD.2481733 (B)
C:\Users\Lucas\AppData\Local\Temp\nsh48DA.tmp 	Gefunden: Trojan.GenericKD.2504267 (B)
C:\Users\Lucas\AppData\Local\Temp\nsh6436.tmp 	Gefunden: Trojan.GenericKD.2553896 (B)
C:\Users\Lucas\AppData\Local\Temp\nsh984C.tmp 	Gefunden: Trojan.GenericKD.2504277 (B)
C:\Users\Lucas\AppData\Local\Temp\nshB68.tmp 	Gefunden: Trojan.GenericKD.2553862 (B)
C:\Users\Lucas\AppData\Local\Temp\nsmBE37.tmp 	Gefunden: Trojan.GenericKD.2553896 (B)
C:\Users\Lucas\AppData\Local\Temp\nso5072.tmp\setup.exe 	Gefunden: Dropped:Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nso691F.tmp\AccDownload.dll 	Gefunden: Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nso6773.tmp 	Gefunden: Trojan.GenericKD.2473107 (B)
C:\Users\Lucas\AppData\Local\Temp\nsr6856.tmp 	Gefunden: Trojan.GenericKD.2476673 (B)
C:\Users\Lucas\AppData\Local\Temp\nsw57B3.tmp\AccDownload.dll 	Gefunden: Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nsxB148.tmp 	Gefunden: Trojan.GenericKD.2553862 (B)
C:\Users\Lucas\AppData\Local\Temp\nszB450.tmp 	Gefunden: Trojan.GenericKD.2433404 (B)
C:\Users\Lucas\AppData\Local\Temp\xtmp2083611\sweetsearch@gmail.com!1.0.0.1031.xpi 	Gefunden: Application.Win32.InstallTool (A)
C:\Users\Lucas\AppData\Local\Temp\xtmp224563\sweetsearch@gmail.com!1.0.0.1031.xpi 	Gefunden: Application.Win32.InstallTool (A)
C:\Users\Lucas\AppData\Local\Temp\xtmp2083611\UninstallManager.exe 	Gefunden: Adware.Agent.POH (B)
C:\Windows\TEMP\1B5E.tmp.exe 	Gefunden: Gen:Variant.Adware.Graftor.183154 (B)
C:\Windows\TEMP\2FCD.tmp.exe 	Gefunden: Gen:Variant.Adware.Graftor.183154 (B)
C:\Windows\TEMP\52B7.tmp.exe 	Gefunden: Gen:Variant.Mikey.17636 (B)
C:\Windows\TEMP\6935.tmp.exe 	Gefunden: Gen:Variant.Adware.Graftor.207429 (B)
C:\Windows\TEMP\3096.tmp.exe 	Gefunden: Trojan.GenericKD.2545071 (B)
C:\Windows\TEMP\8BB8.tmp.exe 	Gefunden: Gen:Variant.Adware.Graftor.207429 (B)
C:\Windows\TEMP\84AB.tmp.exe 	Gefunden: Gen:Variant.Mikey.17636 (B)
C:\Windows\TEMP\A90C.tmp.exe 	Gefunden: Gen:Variant.Mikey.17636 (B)
C:\Windows\TEMP\D308.tmp.exe 	Gefunden: Gen:Variant.Adware.Graftor.207429 (B)
C:\Windows\TEMP\ECBD.tmp.exe 	Gefunden: Gen:Variant.Adware.Graftor.191980 (B)

Gescannt:	76759
Gefunden	78

Scan-Ende:	13.07.2015 08:50:21
Scan-Zeit:	0:14:26

C:\Windows\TEMP\ECBD.tmp.exe	Quarantäne Gen:Variant.Adware.Graftor.191980 (B)
C:\Windows\TEMP\D308.tmp.exe	Quarantäne Gen:Variant.Adware.Graftor.207429 (B)
C:\Windows\TEMP\A90C.tmp.exe	Quarantäne Gen:Variant.Mikey.17636 (B)
C:\Windows\TEMP\84AB.tmp.exe	Quarantäne Gen:Variant.Mikey.17636 (B)
C:\Windows\TEMP\8BB8.tmp.exe	Quarantäne Gen:Variant.Adware.Graftor.207429 (B)
C:\Windows\TEMP\3096.tmp.exe	Quarantäne Trojan.GenericKD.2545071 (B)
C:\Windows\TEMP\6935.tmp.exe	Quarantäne Gen:Variant.Adware.Graftor.207429 (B)
C:\Windows\TEMP\52B7.tmp.exe	Quarantäne Gen:Variant.Mikey.17636 (B)
C:\Windows\TEMP\2FCD.tmp.exe	Quarantäne Gen:Variant.Adware.Graftor.183154 (B)
C:\Windows\TEMP\1B5E.tmp.exe	Quarantäne Gen:Variant.Adware.Graftor.183154 (B)
C:\Users\Lucas\AppData\Local\Temp\xtmp2083611\UninstallManager.exe	Quarantäne Adware.Agent.POH (B)
C:\Users\Lucas\AppData\Local\Temp\xtmp224563\sweetsearch@gmail.com!1.0.0.1031.xpi	Quarantäne Application.Win32.InstallTool (A)
C:\Users\Lucas\AppData\Local\Temp\xtmp2083611\sweetsearch@gmail.com!1.0.0.1031.xpi	Quarantäne Application.Win32.InstallTool (A)
C:\Users\Lucas\AppData\Local\Temp\nszB450.tmp	Quarantäne Trojan.GenericKD.2433404 (B)
C:\Users\Lucas\AppData\Local\Temp\nsxB148.tmp	Quarantäne Trojan.GenericKD.2553862 (B)
C:\Users\Lucas\AppData\Local\Temp\nsw57B3.tmp\AccDownload.dll	Quarantäne Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nsr6856.tmp	Quarantäne Trojan.GenericKD.2476673 (B)
C:\Users\Lucas\AppData\Local\Temp\nso6773.tmp	Quarantäne Trojan.GenericKD.2473107 (B)
C:\Users\Lucas\AppData\Local\Temp\nso691F.tmp\AccDownload.dll	Quarantäne Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nso5072.tmp\setup.exe	Quarantäne Dropped:Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\nsmBE37.tmp	Quarantäne Trojan.GenericKD.2553896 (B)
C:\Users\Lucas\AppData\Local\Temp\nshB68.tmp	Quarantäne Trojan.GenericKD.2553862 (B)
C:\Users\Lucas\AppData\Local\Temp\nsh984C.tmp	Quarantäne Trojan.GenericKD.2504277 (B)
C:\Users\Lucas\AppData\Local\Temp\nsh6436.tmp	Quarantäne Trojan.GenericKD.2553896 (B)
C:\Users\Lucas\AppData\Local\Temp\nsh48DA.tmp	Quarantäne Trojan.GenericKD.2504267 (B)
C:\Users\Lucas\AppData\Local\Temp\nscAEBD.tmp	Quarantäne Trojan.GenericKD.2481733 (B)
C:\Users\Lucas\AppData\Local\Temp\nsc1BE1.tmp	Quarantäne Trojan.GenericKD.2476647 (B)
C:\Users\Lucas\AppData\Local\Temp\nsb9C46.tmp	Quarantäne Trojan.GenericKD.2554439 (B)
C:\Users\Lucas\AppData\Local\Temp\nsa6AD6.tmp\setup.exe	Quarantäne Dropped:Adware.Generic.1277589 (B)
C:\Users\Lucas\AppData\Local\Temp\n4920\gusetup_pub.exe	Quarantäne Trojan.GenericKD.2491800 (B)
C:\Users\Lucas\AppData\Local\Temp\is45637729\1453213_stp\icc.dll	Quarantäne Application.Downloader (A)
C:\Users\Lucas\AppData\Local\Temp\Install_13406\setter.dll	Quarantäne Trojan.GenericKD.2441517 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdF382.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdEC42.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdEA.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdE87A.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdE5AD.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdD661.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdC4F4.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdA563.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsdA524.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd8890.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd83B0.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd82C6.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd8269.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd816F.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd7271.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd5C81.exe	Quarantäne Application.Generic.1349389 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd59E2.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd49EB.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd48C3.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd477B.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd4402.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd3E96.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd39D5.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd385E.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd3294.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd2E7F.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd1C08.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\fsd1534.exe	Quarantäne Gen:Variant.Adware.Zusy.146056 (B)
C:\Users\Lucas\AppData\Local\Temp\DwlTempFolder\temp.exe	Quarantäne Trojan.GenericKD.2493724 (B)
C:\Users\Lucas\AppData\Local\Temp\9F072BAC-27D5-388A-006E-59A449975137.exe	Quarantäne Gen:Variant.Adware.Kazy.592387 (B)
C:\Users\Lucas\AppData\Local\Temp\3D70\temp\TyHelpTFUO.xyz.exe	Quarantäne Gen:Variant.Adware.Kazy.554588 (B)
C:\Users\Lucas\AppData\Local\Temp\494AED28-3F63-30C5-B1DD-69EC66D69817.exe	Quarantäne Gen:Variant.Adware.Zusy.139190 (B)
C:\Users\Lucas\AppData\Local\Temp\1AB8\temp\SuperFinder.xyz.exe	Quarantäne Gen:Variant.Adware.Kazy.554588 (B)
C:\Users\Lucas\AppData\Local\Temp\3D70\temp\priceless_p_soft_partner.exe	Quarantäne Gen:Variant.Adware.Kazy.618288 (B)
C:\ProgramData\utk\FBDEEF3D8DDA4BD6B8CF1D1E5BD154F7\setup.exe	Quarantäne Application.InstallAd (A)
C:\ProgramData\utk\7B0BB8A94AA2468AB7D160D8D2994ACC\setup.exe	Quarantäne Application.InstallAd (A)
C:\ProgramData\utk\305D155958294E25AAB3BDE800DED314\setup.exe	Quarantäne Application.InstallAd (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}	Quarantäne Application.AdFix (A)
Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}	Quarantäne Application.AdShort (A)
Key: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}	Quarantäne Application.AdShort (A)
Key: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-500\SOFTWARE\INSTALLEDBROWSEREXTENSIONS	Quarantäne Application.Win32.InstallAd (A)
Value: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS	Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR	Quarantäne Setting.DisableTaskMgr (A)
Key: HKEY_USERS\S-1-5-18\SOFTWARE\APPDATALOW\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}	Quarantäne Application.Bundle (A)
Key: HKEY_USERS\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\APPDATALOW\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}	Quarantäne Application.Bundle (A)

Quarantäne	77


Gelöscht	0
         

FRST:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:12-07-2015
Ran by Lucas (administrator) on LUCAS-HP on 13-07-2015 09:12:15
Running from C:\Users\Lucas\Desktop
Loaded Profiles: Lucas (Available Profiles: Lucas & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CryptoMill Technologies Ltd.) C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Stale Mix\Stale Mix.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Hewlett-Packard Company) C:\Windows\SysWOW64\flcdlock.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286056 2013-07-30] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-07-04] (IDT, Inc.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [] => [X]
HKLM\...\Run: [CryptoMill Refresh] => C:\Program Files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [683656 2013-07-18] (PDF Complete Inc)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2013-08-16] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-08-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-08-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2013-06-24] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-06-24] (CyberLink Corp.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2013-08-07] (Hewlett-Packard)
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-12-11] (Eastman Kodak Company)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-11-01] (IVT Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Policies\Explorer: [] 
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
AppInit_DLLs: Files => Files File not found
AppInit_DLLs-x32: c:\program files c:\program files c:\programdata\lolliscan\lolliscan32.dll => "c:\programdata\lolliscan\lolliscan32.dll" File not found
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2015-06-25]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Download.lnk [2015-07-06]
ShortcutTarget: Download.lnk -> C:\ProgramData\{d23e0453-e9b1-f889-d23e-e0453e9b114f}\Download.exe (No File)
ShellIconOverlayIdentifiers: [+1TBIcon] -> {B9C55E85-DED6-4911-82F3-83CF1CAB2898} => C:\Program Files\Hewlett-Packard\HP Trust Circles\tbicon.dll [2013-08-23] (CryptoMill Technologies Ltd.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [+1TBIcon] -> {B9C55E85-DED6-4911-82F3-83CF1CAB2898} => C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\tbicon.dll [2013-08-23] (CryptoMill Technologies Ltd.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2BB214E3-8E96-4BCA-B8B5-ED29CE975B70}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{87AD920B-9C51-4107-BBC6-C1E951514BCE}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{B1191B39-F356-41FE-8E8D-2A623572A1B2}: [DhcpNameServer] 192.168.100.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-12-11] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-12-11] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-07-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-07-07] (Google Inc.)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2013-08-06] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2014-05-23]

Chrome: 
=======
CHR Profile: C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-07]
CHR Extension: (Google Docs) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-07]
CHR Extension: (Google Drive) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-07]
CHR Extension: (YouTube) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-07]
CHR Extension: (Adblock Plus) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-07-07]
CHR Extension: (Google Search) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-07]
CHR Extension: (Google Sheets) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-07]
CHR Extension: (Ghostery) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2015-07-07]
CHR Extension: (Google Wallet) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-07]
CHR Extension: (Google Quick Scroll) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2015-07-07]
CHR Extension: (Gmail) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-07]
CHR HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2013-08-06]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1706744 2013-11-01] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-11-01] (IVT Corporation)
R2 CreoService; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [1366488 2013-08-23] (CryptoMill Technologies Ltd.)
R2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2013-08-08] () [File not signed]
R2 CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-07-15] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-07-15] (CyberLink)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2013-08-06] (DigitalPersona, Inc.)
R2 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [558392 2013-08-07] (Hewlett-Packard Company)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-06-02] (SafeNet Inc.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-08-01] (Hewlett-Packard Company)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [14696 2013-07-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2015-05-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2014-12-11] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-09-23] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1143432 2013-07-18] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [337920 2013-07-04] (IDT, Inc.) [File not signed]
R2 Stale Mix; C:\Program Files (x86)\Stale Mix\Stale Mix.exe [8015996 2015-06-24] () [File not signed] <==== ATTENTION
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-09-23] (Intel® Corporation)
S2 Intel(R) ME Service; "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-04-10] (Advanced Micro Devices, Inc.)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [32992 2013-10-08] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [69344 2013-08-22] (IVT Corporation)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [132920 2013-04-24] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1385272 2013-08-08] (Motorola Solutions, Inc.)
S3 btmlehid; C:\Windows\system32\drivers\btmlehid.sys [76088 2013-01-22] (Motorola Solutions, Inc.)
R2 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-06-13] (Hewlett-Packard Company)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-06-02] (SafeNet Inc.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-07-30] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [118216 2013-09-09] (Intel Corporation)
R3 IceKore; C:\Windows\System32\DRIVERS\IceKore.sys [397784 2013-08-19] (CryptoMill Technologies Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-12-11] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw02.sys [3429144 2014-10-06] (Intel Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-12-05] (WinMagic Inc.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [418520 2013-06-17] (Realsil Semiconductor Corporation)
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-12-05] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-12-05] (WinMagic Inc.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1512952 2013-08-08] (Sunplus)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-21] (Windows (R) Win 7 DDK provider)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [32992 2013-10-08] (IVT Corporation)
S3 SmbDrv; \SystemRoot\system32\drivers\Smb_driver_AMDASF.sys [X]
S3 SmbDrvI; \SystemRoot\system32\drivers\Smb_driver_Intel.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-13 09:12 - 2015-07-13 09:12 - 00023495 _____ C:\Users\Lucas\Desktop\FRST.txt
2015-07-13 09:11 - 2015-07-13 09:11 - 02133504 _____ (Farbar) C:\Users\Lucas\Desktop\FRST64.exe
2015-07-13 08:56 - 2015-07-13 08:57 - 00000004 ____H C:\ProgramData\cm-lock
2015-07-13 08:55 - 2015-07-13 09:07 - 00001078 _____ C:\Windows\system32dbgraw.bmp
2015-07-13 08:53 - 2015-07-13 08:53 - 00032036 _____ C:\Users\Lucas\Desktop\scan_150713-083555.txt
2015-07-13 08:31 - 2015-07-13 08:31 - 00000756 _____ C:\Users\Lucas\Desktop\Start Emsisoft Emergency Kit.lnk
2015-07-13 08:31 - 2015-07-13 08:31 - 00000000 ____D C:\EEK
2015-07-13 08:27 - 2015-07-13 08:30 - 160949456 _____ C:\Users\Lucas\Desktop\EmsisoftEmergencyKit.exe
2015-07-13 08:22 - 2015-07-13 08:22 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-07-07 22:58 - 2015-07-13 09:12 - 00000000 ____D C:\FRST
2015-07-07 22:46 - 2015-07-07 22:46 - 00001440 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-07 22:46 - 2015-07-07 22:46 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2015-07-07 22:19 - 2015-07-07 22:19 - 00002270 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-07 22:19 - 2015-07-07 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-07 22:17 - 2015-07-13 08:56 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-07 22:17 - 2015-07-13 08:29 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-07 22:17 - 2015-07-07 22:23 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-07 22:17 - 2015-07-07 22:23 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-07 22:17 - 2015-07-07 22:19 - 00000000 ____D C:\Users\Lucas\AppData\Local\Google
2015-07-07 22:17 - 2015-07-07 22:19 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-07 22:17 - 2015-07-07 22:17 - 00000000 ____D C:\Users\Lucas\AppData\Local\Deployment
2015-07-07 22:17 - 2015-07-07 22:17 - 00000000 ____D C:\Users\Lucas\AppData\Local\Apps\2.0
2015-07-07 21:09 - 2015-07-07 21:09 - 00001340 _____ C:\Users\Lucas\Desktop\JRT.txt
2015-07-07 21:08 - 2015-07-07 21:08 - 00000207 _____ C:\Windows\tweaking.com-regbackup-LUCAS-HP-Windows-7-Professional-(64-bit).dat
2015-07-07 21:08 - 2015-07-07 21:08 - 00000000 ____D C:\RegBackup
2015-07-07 21:07 - 2015-07-07 21:07 - 02953676 _____ (Malwarebytes Corporation) C:\Users\Lucas\Desktop\JRT.exe
2015-07-07 20:58 - 2015-07-07 20:58 - 02244096 _____ C:\Users\Lucas\Desktop\AdwCleaner_4.207.exe
2015-07-07 19:43 - 2015-07-08 00:14 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-07 19:43 - 2015-07-07 19:43 - 00001139 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-07 19:43 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-07 19:43 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-07 19:43 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-03 13:23 - 2015-07-03 13:23 - 00003288 ____N C:\bootsqm.dat
2015-07-02 14:21 - 2015-07-02 14:21 - 00000445 _____ C:\Windows\SynInst.log
2015-07-02 14:21 - 2015-07-02 14:21 - 00000000 ____D C:\ProgramData\Synaptics
2015-07-01 22:52 - 2015-07-01 22:52 - 00000066 _____ C:\Windows\SysWOW64\sn.txt
2015-07-01 10:28 - 2015-07-01 11:41 - 00000198 ____H C:\Users\Lucas\Desktop\Zeichnung1.dwl2
2015-07-01 10:28 - 2015-07-01 11:41 - 00000048 ____H C:\Users\Lucas\Desktop\Zeichnung1.dwl
2015-07-01 10:11 - 2015-07-02 13:57 - 00000000 ____D C:\Users\Lucas\Desktop\Bauaufnahme
2015-06-30 13:15 - 2015-06-30 13:15 - 00000199 ____H C:\Users\Lucas\Documents\Zeichnung1.dwl2
2015-06-30 13:15 - 2015-06-30 13:15 - 00000049 ____H C:\Users\Lucas\Documents\Zeichnung1.dwl
2015-06-30 13:05 - 2015-06-30 13:05 - 00000400 _____ C:\Users\Lucas\AppData\Local\CilJT.vbs
2015-06-30 13:05 - 2015-06-30 13:05 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocToPDFConverter
2015-06-30 13:05 - 2015-06-30 13:05 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\DocToPDFConverter
2015-06-30 12:45 - 2015-06-30 12:45 - 00001389 _____ C:\Users\Lucas\Documents\Zeichnung1_Bks_BKS.prk
2015-06-29 21:40 - 2015-06-30 12:26 - 00000000 ____D C:\Users\Lucas\Desktop\Fassadenplatten Baukonstruktion
2015-06-28 18:58 - 2015-07-06 18:38 - 00003450 _____ C:\Windows\System32\Tasks\Vroifhit
2015-06-28 18:53 - 2015-06-28 18:53 - 00000000 _____ C:\places.sqlite
2015-06-28 12:59 - 2015-06-28 12:59 - 00003174 _____ C:\Windows\System32\Tasks\tet3008
2015-06-27 11:39 - 2015-07-13 08:55 - 00000354 _____ C:\Windows\Tasks\ZHLUVDDS1.job
2015-06-27 11:39 - 2015-07-13 08:55 - 00000342 ____H C:\Windows\Tasks\RBCHDHKMDVJNBIYG.job
2015-06-27 11:39 - 2015-06-27 11:39 - 00003374 _____ C:\Windows\System32\Tasks\RBCHDHKMDVJNBIYG
2015-06-27 11:39 - 2015-06-27 11:39 - 00002876 _____ C:\Windows\System32\Tasks\ZHLUVDDS1
2015-06-27 11:00 - 2015-07-07 21:00 - 00000000 ____D C:\AdwCleaner
2015-06-26 22:18 - 2015-07-07 22:18 - 00000354 _____ C:\Windows\Tasks\FileBurst.job
2015-06-26 22:18 - 2015-06-26 22:18 - 00003266 _____ C:\Windows\System32\Tasks\FileBurst
2015-06-26 18:11 - 2015-06-27 10:37 - 00003458 _____ C:\Windows\System32\Tasks\Evoemdreexse
2015-06-26 12:41 - 2015-07-08 00:41 - 00000354 _____ C:\Windows\Tasks\DataKeeper.job
2015-06-26 12:41 - 2015-06-26 12:41 - 00003266 _____ C:\Windows\System32\Tasks\DataKeeper
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\ProgramData\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files\WIBU-SYSTEMS
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files (x86)\CodeMeter
2015-06-25 12:31 - 2015-06-25 13:42 - 00029272 _____ C:\Users\Lucas\Documents\Zeichnung1_recover.dwg
2015-06-24 13:08 - 2015-06-24 13:08 - 00000121 _____ C:\Users\Lucas\Documents\acad.err
2015-06-24 08:51 - 2015-06-24 08:51 - 00000000 ____D C:\Program Files (x86)\Stale Mix
2015-06-24 08:09 - 2015-07-13 08:31 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D593D5C0-2D8A-47BE-8828-5D8F7DF4B61A}
2015-06-22 18:07 - 2015-06-22 18:07 - 00437248 _____ C:\Users\Lucas\Desktop\Berechnungen Bauantrag.xls
2015-06-22 12:23 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-15 11:09 - 2015-06-15 11:09 - 00003152 _____ C:\Windows\System32\Tasks\{6BE45D62-7EF8-492B-BFFF-27C44B3233FC}
2015-06-13 20:38 - 2015-06-13 20:38 - 00000000 _____ C:\Windows\prleth.sys
2015-06-13 20:38 - 2015-06-13 20:38 - 00000000 _____ C:\Windows\hgfs.sys
2015-06-13 14:44 - 2015-06-13 14:44 - 00037751 _____ C:\Users\Lucas\Documents\Semsteraufgabe Grundriss Bauaufnahme Klute.bak

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-13 09:05 - 2009-07-14 06:45 - 00037408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-13 09:05 - 2009-07-14 06:45 - 00037408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-13 09:00 - 2014-10-14 15:01 - 01194299 _____ C:\Windows\WindowsUpdate.log
2015-07-13 08:57 - 2014-03-18 21:50 - 00000000 ____D C:\ProgramData\PDFC
2015-07-13 08:56 - 2014-10-31 18:06 - 00000000 ____D C:\ProgramData\Kodak
2015-07-13 08:56 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.log
2015-07-13 08:56 - 2013-11-01 16:08 - 00001018 _____ C:\Windows\SysWOW64\bscs.ini
2015-07-13 08:55 - 2015-05-20 10:19 - 00000330 _____ C:\Windows\Tasks\HYXFDJNCCX1.job
2015-07-13 08:55 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-13 08:55 - 2009-07-14 06:51 - 00090034 _____ C:\Windows\setupact.log
2015-07-13 08:36 - 2014-10-29 22:47 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2015-07-13 08:24 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.001
2015-07-13 08:16 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.002
2015-07-09 13:41 - 2014-10-14 21:07 - 00000000 ____D C:\Users\Lucas\AppData\Local\Akamai
2015-07-09 13:38 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.003
2015-07-09 13:36 - 2010-11-21 05:47 - 00763820 _____ C:\Windows\PFRO.log
2015-07-08 02:49 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.004
2015-07-08 02:47 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\addins
2015-07-07 23:59 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.005
2015-07-07 22:54 - 2014-12-08 13:12 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2EA83ECB-45D2-4CF8-80F6-39926218F11E}
2015-07-07 22:53 - 2014-05-23 09:50 - 00700380 _____ C:\Windows\system32\perfh007.dat
2015-07-07 22:53 - 2014-05-23 09:50 - 00149986 _____ C:\Windows\system32\perfc007.dat
2015-07-07 22:53 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-07 22:47 - 2014-12-08 13:12 - 00096040 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-07 22:47 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-07-07 21:00 - 2014-10-14 15:05 - 00000984 _____ C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-07 21:00 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-07 20:53 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages
2015-07-07 20:50 - 2014-10-14 15:04 - 00000000 ____D C:\Users\Lucas
2015-07-07 20:48 - 2015-05-26 00:43 - 00000000 ____D C:\Program Files (x86)\News Factory
2015-07-07 20:10 - 2015-05-20 10:46 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-07 18:06 - 2015-01-29 11:15 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLucas
2015-07-07 18:06 - 2015-01-29 11:15 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForLucas.job
2015-07-05 12:08 - 2010-11-21 05:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 10:26 - 2015-05-20 10:21 - 00000000 ___HD C:\ProgramData\utk
2015-07-01 22:52 - 2015-05-26 00:32 - 00001312 __RSH C:\ProgramData\ntuser.pol
2015-06-29 11:36 - 2015-05-25 23:45 - 00001478 _____ C:\Users\Lucas\Documents\plot.log
2015-06-29 09:58 - 2014-10-14 15:06 - 00000000 ____D C:\Users\Lucas\AppData\Local\PDFC
2015-06-28 17:32 - 2009-07-14 04:34 - 00000505 _____ C:\Windows\win.ini
2015-06-26 19:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-25 13:43 - 2015-05-29 09:34 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\kubit
2015-06-25 13:42 - 2014-05-23 09:14 - 00054710 _____ C:\Windows\DPINST.LOG
2015-06-25 13:03 - 2015-05-29 09:45 - 00000000 ____D C:\Windows\system32\appmgmt
2015-06-22 17:54 - 2015-05-30 11:56 - 00000000 ____D C:\Users\Lucas\Desktop\Daten
2015-06-15 11:28 - 2015-06-01 10:12 - 00000045 _____ C:\user.js

==================== Files in the root of some directories =======

2015-06-30 13:05 - 2015-06-30 13:05 - 0000400 _____ () C:\Users\Lucas\AppData\Local\CilJT.vbs
2014-10-31 19:21 - 2014-10-31 19:21 - 0000236 _____ () C:\Users\Lucas\AppData\Local\LaunchHomeCenter.log
2015-06-02 14:00 - 2015-06-02 14:00 - 0000000 _____ () C:\Users\Lucas\AppData\Local\Temp.dat
2015-07-13 08:56 - 2015-07-13 08:57 - 0000004 ____H () C:\ProgramData\cm-lock
2014-10-15 20:56 - 2014-10-15 20:56 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:
====================
C:\Users\Lucas\AppData\Local\Temp\2db6de540918442a8734b0b46ad2829d616712.exe
C:\Users\Lucas\AppData\Local\Temp\2db6de540918442a8734b0b46ad2829d734193.exe
C:\Users\Lucas\AppData\Local\Temp\494AED28-3F63-30C5-B1DD-69EC66D69817.dll
C:\Users\Lucas\AppData\Local\Temp\AcDeltree.exe
C:\Users\Lucas\AppData\Local\Temp\Extract.exe
C:\Users\Lucas\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Lucas\AppData\Local\Temp\OnlineBackup.exe
C:\Users\Lucas\AppData\Local\Temp\Quarantine.exe
C:\Users\Lucas\AppData\Local\Temp\setacl.exe
C:\Users\Lucas\AppData\Local\Temp\SP63598.exe
C:\Users\Lucas\AppData\Local\Temp\SP63852.exe
C:\Users\Lucas\AppData\Local\Temp\SP64934.exe
C:\Users\Lucas\AppData\Local\Temp\SP67047.exe
C:\Users\Lucas\AppData\Local\Temp\SP69971.exe
C:\Users\Lucas\AppData\Local\Temp\SP70378.exe
C:\Users\Lucas\AppData\Local\Temp\SP70455.exe
C:\Users\Lucas\AppData\Local\Temp\sqlite3.dll
C:\Users\Lucas\AppData\Local\Temp\tu17p84.exe
C:\Users\Lucas\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-23 09:38

==================== End of log ============================
         
--- --- ---


Addition:

[CODE]Additional
FRST Logfile:
Code:
ATTFilter
scan result of Farbar Recovery Scan Tool (x64) Version:12-07-2015
Ran by Lucas at 2015-07-13 09:13:10
Running from C:\Users\Lucas\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2790422825-2525740105-2010072699-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-2790422825-2525740105-2010072699-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2790422825-2525740105-2010072699-1003 - Limited - Enabled)
Lucas (S-1-5-21-2790422825-2525740105-2010072699-1002 - Administrator - Enabled) => C:\Users\Lucas

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated)
aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{C4CB2534-82F4-F4AF-5767-9EE64EF9EB64}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoCAD 2015 - Deutsch (German) (Version: 20.0.210.0 - Autodesk) Hidden
AutoCAD 2015 - Deutsch (German) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - Deutsch (German) (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.2.3.1000 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk AutoCAD 2015 - Deutsch (German) (HKLM\...\AutoCAD 2015 - Deutsch (German)) (Version: 20.0.51.0 - Autodesk)
Autodesk AutoCAD 2015 - Deutsch (German) SP2 (HKLM\...\AutoCAD 2015 - Deutsch (German) SP2) (Version: 20.0.210.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{B0E4871A-09A2-49C3-9A9E-D6409B37FD3A}) (Version: 4.36.2452 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.1.39 - Autodesk)
Autodesk ReCap (Version: 1.3.1.39 - Autodesk) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
C4USelfUpdater (x32 Version: 1.00.0000 - Your Company Name) Hidden
center (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
CodeMeter Runtime Kit v5.21 (HKLM\...\{05CA69B3-6699-425F-8223-39E4E00B6581}) (Version: 5.21.1478.500 - WIBU-SYSTEMS AG)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3115 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.2.1.4224 - CyberLink Corp.)
DocToPDFConverter (HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\DocToPDFConverter) (Version: 01.00.00.00 - VolatoTech)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
essentials (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.2 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{84663FDA-1374-4048-9869-DD4A8784785A}) (Version: 6.0.16.1 - Hewlett-Packard Company)
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 8.2.0.1663 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{7ED7BF91-D145-480A-B206-6891576F6935}) (Version: 4.6.12.1 - Hewlett-Packard Company)
HP Device Access Manager (HKLM\...\{9F7FF800-8C11-4741-8D20-92E43CA02FD6}) (Version: 8.2.0.10 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{7940DAB9-AC72-4422-8908-DCF58C2C1D21}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Drive Encryption (HKLM\...\HPDriveEncryption) (Version: 8.6.11.10 - Hewlett-Packard Company)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{240B2BF7-E7E6-425C-A2A4-A3149189BF7F}) (Version: 2.3.1 - Hewlett-Packard Company)
HP File Sanitizer (HKLM-x32\...\{547607B0-3294-4ECA-8F5E-921404676CBB}) (Version: 8.4.11.1 - Hewlett-Packard Company)
HP HD Webcam Driver (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.8.30 - SunplusIT)
HP Hotkey Support (HKLM-x32\...\{C807BEFB-0F17-41AC-B307-D7B5E1553040}) (Version: 5.0.20.1 - Hewlett-Packard Company)
HP PageLift (HKLM-x32\...\{708ABF62-5D7A-4550-823A-1F9EFA63645A}) (Version: 1.0.11.1 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{5C2D96B7-0468-4450-8BD9-63AB796D72CF}) (Version: 3.4.11.0 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{7EF08127-4C30-4C05-8CEB-544F8A71C080}) (Version: 8.7.1.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{A3B64280-DE4C-40F0-86BB-CCB2A6056BA2}) (Version: 7.3.32.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
HP System Default Settings (HKLM-x32\...\{3A61A282-4F08-4D43-920C-DC30ECE528E8}) (Version: 2.6.1 - Hewlett-Packard Company)
HP Theft Recovery (HKLM-x32\...\InstallShield_{BAC712C6-4061-4C9F-AB58-A5C53E76704A}) (Version: 8.2.0.9 - Hewlett-Packard Company)
HP Trust Circles (HKLM-x32\...\HP Trust Circles) (Version: 8.2.15.16418 - CryptoMill Technologies)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6486.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3993 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1337.1) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0366 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.7.3.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{201B03D6-FDDA-4C70-8A15-887F5B3CE365}) (Version: 4.2.19.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e63d3cb3-0b4d-44ca-aba0-ba433f2f37fd}) (Version: 17.13.0 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kodak AIO Printer (Version: 7.8.1.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.8.5.2 - Eastman Kodak Company)
kubit Box 2015 - PhoToPlan Pro Deutsch für AutoCAD (LT) 2015 64-bit (HKLM-x32\...\kubitBox_2015_DE_AC2015_is1) (Version: 15.0.14.13228 - kubit GmbH, Germany)
kubit Box version manager (HKLM-x32\...\kubitBox_version_manager_is1) (Version: 15.0.14.13228 - kubit GmbH, Germany)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
OEM Application Profile (HKLM-x32\...\{CCBD6679-C7CF-2030-2A1F-3640781DF4F4}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
PDF Complete Corporate Edition (HKLM-x32\...\PDF Complete) (Version: 4.1.50 - PDF Complete, Inc)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.5.0 - Prolific Technology INC)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Ralink Bluetooth Stack (HKLM\...\{BCDD86BE-1426-19BA-D1D1-C94D92FD6281}) (Version: 11.0.748.0 - Mediatek)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.1.9200.18 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.73.618.2013 - Realtek)
Sentinel Runtime (HKLM-x32\...\{678E25DE-EB70-4B01-9BAB-649F613A8434}) (Version: 6.63.1.43776 - SafeNet Inc.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Validity Fingerprint Sensor Driver (HKLM\...\{F5850B80-27F9-406E-91D3-1329F813BA63}) (Version: 4.5.130.0 - Validity Sensors, Inc.)
Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\de-DE\acadficn.dll (Autodesk, Inc.)

==================== Restore Points =========================

25-06-2015 13:03:23 LuxuryCasino wird entfernt
25-06-2015 13:39:09 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
25-06-2015 13:39:21 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
25-06-2015 13:39:44 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
25-06-2015 13:40:05 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
26-06-2015 12:53:10 Windows Update
27-06-2015 10:49:56 LuxuryCasino wird entfernt
29-06-2015 21:42:24 Windows Update
02-07-2015 14:21:59 Removed SketchUp-Import.
02-07-2015 22:39:15 Windows Update
06-07-2015 18:44:56 Windows Update
13-07-2015 08:39:22 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02C49FCB-27F0-45F4-BC7A-A583D99363DA} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {176D0F84-3664-4CAC-9771-7B84432AD161} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-09] (Hewlett-Packard Company)
Task: {242F4187-E746-4A99-BC3C-78D0F0DB804D} - System32\Tasks\ZHLUVDDS1 => C:\ProgramData\TomorrowGames\TomorrowGames.exe <==== ATTENTION
Task: {416373CD-3D9F-41FE-AE65-29CDA7FBA0E9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-07] (Google Inc.)
Task: {4EA02EBE-7251-40F9-86BC-E83D7CF55CF6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {5732EE0A-F5DF-4DD2-A76B-B5D973F1466A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-09] (Hewlett-Packard Company)
Task: {5910D080-AB2B-4D31-93E5-ADB626C4AF40} - System32\Tasks\HPCeeScheduleForLucas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {6F66536E-160C-44D6-AFCB-5B1943133EA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-07] (Google Inc.)
Task: {7486673A-A35D-4491-BFD2-62619A991C04} - System32\Tasks\DataKeeper => c:\programdata\{3684b0ec-8722-5dc0-3684-4b0ec872c3b2}\1539358894756496780b.exe <==== ATTENTION
Task: {95FDDBBC-6076-46B7-B551-AFED27391CC8} - System32\Tasks\{6BE45D62-7EF8-492B-BFFF-27C44B3233FC} => pcalua.exe -a C:\Users\Lucas\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cmi
Task: {992714DC-0A07-4F04-919C-8BA74618CE44} - \WordShark Auto Updater 1.10.0.19 Pending Update No Task File <==== ATTENTION
Task: {ADA41147-15B1-46D2-89AA-8B5D4CAA849F} - \SMW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32 No Task File <==== ATTENTION
Task: {BC2252B5-B587-48D6-BB8E-27A51818B1B2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {C3B9BD71-AE02-42B4-8EB0-D21C7D0F4C20} - \SPBIW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32 No Task File <==== ATTENTION
Task: {C5E6F396-DA0C-4515-92D3-E89DEA5E894F} - System32\Tasks\Vroifhit => C:\ProgramData\Vroifhit\1.0.1.0\irpnaxna.exe
Task: {EB599B91-AFB4-40E9-85C3-08F1AABC0E97} - System32\Tasks\RBCHDHKMDVJNBIYG => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION
Task: {ECA0C24F-1181-4152-8F86-6664DD76EC67} - System32\Tasks\FileBurst => c:\programdata\{35db870e-133f-8d99-35db-b870e1331c38}\3014381927046394415e.exe <==== ATTENTION
Task: {ED668FCF-99AE-4F58-80C4-DEC7F6697605} - System32\Tasks\HYXFDJNCCX1 => C:\ProgramData\LolliScan\LolliScan.exe <==== ATTENTION
Task: {EEEDF8D0-FA2C-4911-9B2A-ED0CA1F77305} - System32\Tasks\tet3008 => C:\Program
Task: {F29679C7-C075-4C03-A64D-09B1383A728E} - System32\Tasks\Evoemdreexse => C:\ProgramData\Evoemdreexse\1.0.1.0\gawrufia.exe
Task: {FB5FD938-609B-4749-BF9B-403C7AED27AC} - \SMWUpd No Task File <==== ATTENTION
Task: {FFE861BF-4A14-42F4-BC21-DC8CF935AF74} - \WordShark Auto Updater 1.10.0.19 Core No Task File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DataKeeper.job => c:\programdata\{3684b0ec-8722-5dc0-3684-4b0ec872c3b2}\1539358894756496780b.exe <==== ATTENTION
Task: C:\Windows\Tasks\FileBurst.job => c:\programdata\{35db870e-133f-8d99-35db-b870e1331c38}\3014381927046394415e.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLucas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HYXFDJNCCX1.job => C:\ProgramData\LolliScan\LolliScan.exe <==== ATTENTION
Task: C:\Windows\Tasks\RBCHDHKMDVJNBIYG.job => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION
Task: C:\Windows\Tasks\ZHLUVDDS1.job => C:\ProgramData\TomorrowGames\TomorrowGames.exe <==== ATTENTION

==================== Loaded Modules (Whitelisted) ==============

2013-05-22 22:21 - 2013-05-22 22:21 - 00299832 _____ () C:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00029432 _____ () C:\Windows\system32\BsTrace.dll
2013-08-08 00:02 - 2013-08-08 00:02 - 00007168 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
2015-06-24 08:51 - 2015-06-24 08:51 - 08015996 _____ () C:\Program Files (x86)\Stale Mix\Stale Mix.exe
2014-05-01 20:05 - 2014-05-01 20:05 - 00232328 _____ () C:\Program Files\Autodesk\Autodesk Sync\qjson_Ad_0.dll
2014-05-01 20:05 - 2014-05-01 20:05 - 00059784 _____ () C:\Program Files\Autodesk\Autodesk Sync\qoauth_Ad_1.dll
2014-05-01 20:05 - 2014-05-01 20:05 - 00922504 _____ () C:\Program Files\Autodesk\Autodesk Sync\qca_Ad_2.dll
2014-05-01 20:05 - 2014-05-01 20:05 - 00048520 _____ () C:\Program Files\Autodesk\Autodesk Sync\QtSolutions_MFCMigrationFramework_Ad_2.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00016632 _____ () C:\Windows\system32\BsHelpCSps.dll
2014-10-11 14:06 - 2014-10-11 14:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00080120 _____ () C:\Windows\system32\BsProfilefunc.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00371448 _____ () C:\Windows\system32\BsExtendFunc.dll
2013-06-05 20:35 - 2013-06-05 20:35 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2014-12-11 13:05 - 2014-12-11 13:04 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Lucas\Downloads\kubitBox_PhoToPlan-Pro_15.0.13.11782_setup.exe:BDU

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Lucas\AppData\Local\Akamai\netsession_win.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{A1D60A40-05C0-4C86-AF1F-D4DA3FD51773}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8CA4529A-95DB-4FCC-B067-3C2C50812EAE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{93D8B6AC-CF49-47C8-8005-B5AFF56D5E21}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DABCFFD3-8D45-417D-BA14-C69AA52194BF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D5CEC9CA-F808-4AE0-AE25-77FBFE0B8886}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B501E2D1-BFFE-4441-A2D5-0FC0CD168706}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{1C85D374-59C1-468A-9018-9745D7DC5093}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{8F953712-E433-49DF-A002-A7D376666C04}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{E27FB7D7-5D2D-4972-ADB8-A44C95E26CF7}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{4BE97F83-9D3F-4887-ACE6-34AE3E1563EA}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{73153180-78AF-42E7-8D05-646A2C56EADC}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{45D9AF8C-9A52-4BAA-8376-CDBE399CE0A1}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [TCP Query User{13BB74D3-8622-4721-8081-8DB59758D2E6}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{EB7E3CB3-19BF-4C5F-9CC4-421DBB9AE30C}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{D00B7FD5-A627-4B26-AD1C-D62B27AB678F}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{57221968-5EE3-42EA-B07D-EA46287A9873}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [{05E17465-AEF7-498E-9F7D-CE74E34BAE7C}] => (Allow) LPort=50248
FirewallRules: [{D11437EB-8660-49A3-B67A-3C3277FBD4FC}] => (Allow) LPort=9322
FirewallRules: [{1BA7CC1E-A17F-49C2-ABF2-4E05D85223CE}] => (Allow) LPort=5353
FirewallRules: [{57239587-E810-4DB8-834C-3D27C837E283}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{537424BB-BC6F-4C55-B44B-AA20A6262653}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{ACF4103F-AB52-44FF-9C85-D5D2F779230F}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{494908CC-36F8-43FE-9357-84C1AFFEB07A}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{DCA08705-B65E-4EFD-ABB3-46B84993610B}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{881F2FBD-55FF-4CEF-AB32-6291C0E36F3C}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{8B8E7CEC-B865-4F23-BEA1-B2F8F059920D}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{0AAC8912-7341-4CE6-9D21-11B23950AE02}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{2955AF9E-D6E7-4CEC-B461-1363520B78F5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{07C30D84-7679-4C48-8267-7D23B6B4DCE5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{7E0026E3-F8B5-44F8-8A05-E401A687866D}] => (Allow) LPort=9322
FirewallRules: [{FB351028-8D36-44CB-A864-B4AB8D787A24}] => (Allow) LPort=5353
FirewallRules: [{B391B01C-A4F0-4EAC-A9A3-FE98A2177DA2}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{F1760CA4-B264-4C33-BB7E-DF84F53F6C96}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{FDF86C20-8BEE-49D5-9AE6-097F1EEC0C01}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{6185CA28-156A-4733-964F-39087EA25F87}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{E13DD6DB-DFB8-41B1-B321-A4A59EAD6D45}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{D3FB534A-C803-478C-9713-5432B270CB96}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{639FB50C-153F-4503-9882-79ABEBE95D22}] => (Allow) C:\Windows\system32\hasplms.exe
FirewallRules: [{9C0E9C43-A297-4808-A067-160060270005}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{F30B81AB-9AEB-4FFA-8337-74BDFA4D1D9A}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
FirewallRules: [{33AD394C-DC83-4F18-86EE-DB5E30410D2B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Bluetooth Server
Description: Bluetooth Server
Class Guid: {34446e8e-37b4-4b16-9da6-bea2db33465a}
Manufacturer: Intel Corporation
Service: btmaux
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/13/2015 08:56:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/13/2015 08:56:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/13/2015 08:24:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/13/2015 08:24:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/13/2015 08:16:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/13/2015 08:16:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/09/2015 01:41:16 PM) (Source: MsiInstaller) (EventID: 11310) (User: Lucas-HP)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Lucas\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (07/09/2015 01:40:43 PM) (Source: MsiInstaller) (EventID: 11310) (User: Lucas-HP)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Lucas\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (07/09/2015 01:38:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/09/2015 01:38:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.


System errors:
=============
Error: (07/13/2015 09:06:48 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/13/2015 09:06:43 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/13/2015 08:59:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/13/2015 08:56:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Autodesk Application Manager Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (07/13/2015 08:56:00 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Autodesk Application Manager Service erreicht.

Error: (07/13/2015 08:37:03 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/13/2015 08:35:19 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/13/2015 08:28:21 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/13/2015 08:24:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Autodesk Application Manager Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (07/13/2015 08:24:37 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Autodesk Application Manager Service erreicht.


Microsoft Office:
=========================
Error: (07/13/2015 08:56:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/13/2015 08:56:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/13/2015 08:24:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/13/2015 08:24:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/13/2015 08:16:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/13/2015 08:16:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/09/2015 01:41:16 PM) (Source: MsiInstaller) (EventID: 11310) (User: Lucas-HP)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Lucas\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/09/2015 01:40:43 PM) (Source: MsiInstaller) (EventID: 11310) (User: Lucas-HP)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Lucas\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (07/09/2015 01:38:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/09/2015 01:38:43 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.


CodeIntegrity Errors:
===================================
  Date: 2015-06-29 21:44:47.261
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.279
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.246
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.215
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz
Percentage of memory in use: 28%
Total physical RAM: 8073.11 MB
Available physical RAM: 5807.82 MB
Total Virtual: 16144.43 MB
Available Virtual: 13595.58 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:682.75 GB) (Free:601.17 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:12.88 GB) (Free:1.41 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.96 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 206BA7A1)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=682.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

==================== End of log ============================
         
--- --- ---


Nicht von dem Datum der Ausführung bei manchen Tools wundern. Die habe ich parallel zu dem anderen Laptop laufen lassen. Aktuell sind die aufjedenfall, mit dem Laptop wurde danach nichts mehr angestellt.
__________________
Beste Grüße,

Kuhlambo12

Alt 14.07.2015, 16:37   #24
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Task: {242F4187-E746-4A99-BC3C-78D0F0DB804D} - System32\Tasks\ZHLUVDDS1 => C:\ProgramData\TomorrowGames\TomorrowGames.exe <==== ATTENTION

Task: {7486673A-A35D-4491-BFD2-62619A991C04} - System32\Tasks\DataKeeper => c:\programdata\{3684b0ec-8722-5dc0-3684-4b0ec872c3b2}\1539358894756496780b.exe <==== ATTENTION

Task: {992714DC-0A07-4F04-919C-8BA74618CE44} - \WordShark Auto Updater 1.10.0.19 Pending Update No Task File <==== ATTENTION

Task: {ADA41147-15B1-46D2-89AA-8B5D4CAA849F} - \SMW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32 No Task File <==== ATTENTION

Task: {C3B9BD71-AE02-42B4-8EB0-D21C7D0F4C20} - \SPBIW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32 No Task File <==== ATTENTION

Task: {EB599B91-AFB4-40E9-85C3-08F1AABC0E97} - System32\Tasks\RBCHDHKMDVJNBIYG => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION

Task: {ECA0C24F-1181-4152-8F86-6664DD76EC67} - System32\Tasks\FileBurst => c:\programdata\{35db870e-133f-8d99-35db-b870e1331c38}\3014381927046394415e.exe <==== ATTENTION

Task: {ED668FCF-99AE-4F58-80C4-DEC7F6697605} - System32\Tasks\HYXFDJNCCX1 => C:\ProgramData\LolliScan\LolliScan.exe <==== ATTENTION

Task: {FB5FD938-609B-4749-BF9B-403C7AED27AC} - \SMWUpd No Task File <==== ATTENTION

Task: {FFE861BF-4A14-42F4-BC21-DC8CF935AF74} - \WordShark Auto Updater 1.10.0.19 Core No Task File <==== ATTENTION

Task: C:\Windows\Tasks\DataKeeper.job => c:\programdata\{3684b0ec-8722-5dc0-3684-4b0ec872c3b2}\1539358894756496780b.exe <==== ATTENTION

Task: C:\Windows\Tasks\FileBurst.job => c:\programdata\{35db870e-133f-8d99-35db-b870e1331c38}\3014381927046394415e.exe <==== ATTENTION

Task: C:\Windows\Tasks\HYXFDJNCCX1.job => C:\ProgramData\LolliScan\LolliScan.exe <==== ATTENTION

Task: C:\Windows\Tasks\RBCHDHKMDVJNBIYG.job => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION

Task: C:\Windows\Tasks\ZHLUVDDS1.job => C:\ProgramData\TomorrowGames\TomorrowGames.exe <==== ATTENTION

Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.






ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.07.2015, 01:19   #25
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



So dann 1x Eset:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=416499a55d150a4fab2eba80a04597c3
# end=init
# utc_time=2015-07-14 08:52:56
# local_time=2015-07-14 10:52:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=41221
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Init
Update Download
Update Finalize
Updated modules version: 24797
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=416499a55d150a4fab2eba80a04597c3
# end=updated
# utc_time=2015-07-14 09:05:48
# local_time=2015-07-14 11:05:48 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=416499a55d150a4fab2eba80a04597c3
# engine=24797
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-07-14 10:15:01
# local_time=2015-07-15 12:15:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 5413909 130225711 0 0
# scanned=195575
# found=27
# cleaned=0
# scan_time=4152
sh=1756D734C35D116CA5406E6C973F1824EFA73F99 ft=1 fh=fb9309bb42b5c905 vn="Variante von Win32/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Common Files\Goobzo\GBUpdate\smci32.dll.vir"
sh=789F105DC4B504DE77107606C243FBE843825628 ft=1 fh=e9a91eef8da27f88 vn="Variante von Win64/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Common Files\Goobzo\GBUpdate\smci64.dll.vir"
sh=DC56BA7313225D06705EB83AF7FD1B842CA2A01F ft=1 fh=9f1eeebcb7d2f68f vn="Variante von Win32/SpeedBit.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Common Files\System\SysMenu.dll.vir"
sh=09E369F9EA069BC141F0D34DC18AEC3ABBA77F6B ft=1 fh=241f3ea108f7cde2 vn="Variante von Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Convertor\Convertor.exe.vir"
sh=A10442EFD31C595DF97A4D1C1F089131740489F3 ft=1 fh=42ed3c92687a494b vn="Win32/Adware.Flinject.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\FastSearch\tet3008.exe.vir"
sh=4628C03DD1F85BF68449DF4D7A5198A958FC74D0 ft=1 fh=3afe48861fd098a3 vn="Variante von Win32/TrojanDropper.Addrop.J Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\GUPlayer\GUPlayerUninstaller.exe.vir"
sh=1C88A7C4FD5E9BBE5F558AB731149EC1E59A67AC ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\miuitab\ffsearch_toolbar!1.0.0.1031.xpi.vir"
sh=09E369F9EA069BC141F0D34DC18AEC3ABBA77F6B ft=1 fh=241f3ea108f7cde2 vn="Variante von Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Winsta\bin\Winsta.exe.vir"
sh=1C88A7C4FD5E9BBE5F558AB731149EC1E59A67AC ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi.vir"
sh=77370ED083FF8536201D36F7AE7DEA25B0D6D0D8 ft=1 fh=065d402bacd166c2 vn="Variante von Win32/SBWatchman.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe.vir"
sh=0DE8331C8755C9681D79E14C37EDA7F083BEE0A7 ft=1 fh=d7470b83924ec406 vn="Variante von Win32/SpeedBit.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YTDownloader\DownloadAPI.dll.vir"
sh=589CBF9BB6E85716F3361626C994FC09D51CB550 ft=1 fh=d29f5061a13d0fe9 vn="Variante von Win32/ShopperPro.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YTDownloader\Updater.exe.vir"
sh=7DB9DF9A5A104682DC0D9BF8B81FC2E82826B538 ft=1 fh=66ac07458e401c46 vn="Variante von Win32/SBWatchman.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YTDownloader\YTDownloader.exe.vir"
sh=17343877B0A8E0F53D3EF61F73BEECDF78AF21FF ft=1 fh=8888769f573f51e0 vn="Win32/SpeedBit.B.gen evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\YTDownloader\YTDUninstall.exe.vir"
sh=F2E6503BD29D9C3B62614629A62DC9EFE5213601 ft=1 fh=c71c001191e02235 vn="Variante von Win32/Adware.MultiPlug.KU Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{4e04294b-b28b-416e-4e04-4294bb28a52e}\priceless_p_soft_partner.exe.vir"
sh=C4E71EC8ACF152C1B9B490F2339F002B4E564A80 ft=1 fh=be74485fa740c023 vn="Win32/Adware.ConvertAd.PD Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\EBBA837F-1432119485-11E3-B710-42083202C0FF\onsfF6C1.tmp.vir"
sh=6BEEC2A13F36E16DE139DCCE00DCAD0B8AF9889E ft=1 fh=1d41f526e8e0a25c vn="Variante von Win32/Adware.ConvertAd.QH Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\EBBA837F-1432119485-11E3-B710-42083202C0FF\pnsfF6C2.exe.vir"
sh=91FFD4D90FB559C82BB3BB00268ABB85CF710E69 ft=1 fh=4b250aae3644a4e8 vn="Variante von Win32/Adware.ConvertAd.QA Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\EBBA837F-1432119485-11E3-B710-42083202C0FF\rnsfF6C0.exe.vir"
sh=F1B8EA971E6F90476D8F2343DF5B57ECD0CF40A3 ft=1 fh=c71c0011f3b36b2e vn="Variante von Win32/Adware.ConvertAd.PL Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\EBBA837F-1432119485-11E3-B710-42083202C0FF\snspF6AF.tmp.vir"
sh=216DEF655F567A05FD8887BCD8D5B0ED431139CC ft=1 fh=a223a4f032c3bf59 vn="Win32/Adware.ConvertAd.PY Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\EBBA837F-1432119485-11E3-B710-42083202C0FF\Uninstall.exe.vir"
sh=3C6235A2342A488A2DD67B6E26F7BE3A84C43292 ft=0 fh=0000000000000000 vn="Win32/AnyProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Roaming\AnyProtectEx\swf\swfV8.swf.vir"
sh=1A385914BBAFBF82AE6A41A1342256FC0F801FF1 ft=1 fh=0ea20545276ada37 vn="Variante von Win32/Adware.Vonteera.L Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Roaming\Convertor\Convertor.exe.vir"
sh=D608AD6C121DC889D34C4AB8A1458FB5D4721DD7 ft=1 fh=c71c001192fed9fb vn="Variante von Win32/ELEX.CP evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Roaming\mystartsearch\UninstallManager.exe.vir"
sh=2CD66051AED5F3298240D11A932533D02241B75B ft=1 fh=73ef9798e16d537f vn="Variante von Win32/Adware.ConvertAd.GQ Anwendung" ac=I fn="C:\ProgramData\utk\7592699EEF3A4396AF17ABC0BB5EC0A4\setup.exe"
sh=E24D9D8C4B94AB1562CABA29A33F46643F4CBC25 ft=1 fh=0ebec7f1676eb52f vn="Variante von Win32/Adware.ConvertAd.TF.gen Anwendung" ac=I fn="C:\ProgramData\utk\E185F956FA1341B098E2F280FBA5BA99\setup.exe"
sh=2CD66051AED5F3298240D11A932533D02241B75B ft=1 fh=73ef9798e16d537f vn="Variante von Win32/Adware.ConvertAd.GQ Anwendung" ac=I fn="C:\Users\All Users\utk\7592699EEF3A4396AF17ABC0BB5EC0A4\setup.exe"
sh=E24D9D8C4B94AB1562CABA29A33F46643F4CBC25 ft=1 fh=0ebec7f1676eb52f vn="Variante von Win32/Adware.ConvertAd.TF.gen Anwendung" ac=I fn="C:\Users\All Users\utk\E185F956FA1341B098E2F280FBA5BA99\setup.exe"
         
und SecurityCheck:

Code:
ATTFilter
 Results of screen317's Security Check version 1.004  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Google Chrome (43.0.2357.132) 
 Google Chrome (43.0.2357.134) 
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-07-2015
Ran by Lucas (administrator) on LUCAS-HP on 15-07-2015 02:10:50
Running from C:\Users\Lucas\Desktop
Loaded Profiles: Lucas (Available Profiles: Lucas & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CryptoMill Technologies Ltd.) C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Hewlett-Packard Company) C:\Windows\SysWOW64\flcdlock.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-07-04] (IDT, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286056 2013-07-30] (Intel Corporation)
HKLM\...\Run: [CryptoMill Refresh] => C:\Program Files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-12-11] (Eastman Kodak Company)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-06-24] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2013-06-24] (CyberLink)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-08-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-08-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2013-08-16] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2013-08-07] (Hewlett-Packard)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-11-01] (IVT Corporation)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-10-16] (Hewlett-Packard Company)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Policies\Explorer: [] 
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
AppInit_DLLs: Files => Files File not found
AppInit_DLLs-x32: c:\program files c:\program files c:\programdata\lolliscan\lolliscan32.dll => "c:\programdata\lolliscan\lolliscan32.dll" File not found
Lsa: [Notification Packages] DPPassFilter scecli
ShellIconOverlayIdentifiers: [+1TBIcon] -> {B9C55E85-DED6-4911-82F3-83CF1CAB2898} => C:\Program Files\Hewlett-Packard\HP Trust Circles\tbicon.dll [2013-08-23] (CryptoMill Technologies Ltd.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [+1TBIcon] -> {B9C55E85-DED6-4911-82F3-83CF1CAB2898} => C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\tbicon.dll [2013-08-23] (CryptoMill Technologies Ltd.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2BB214E3-8E96-4BCA-B8B5-ED29CE975B70}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{87AD920B-9C51-4107-BBC6-C1E951514BCE}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{B1191B39-F356-41FE-8E8D-2A623572A1B2}: [DhcpNameServer] 192.168.100.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-12-11] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-12-11] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-07-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-07-07] (Google Inc.)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2013-08-06] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2014-05-23]

Chrome: 
=======
CHR Profile: C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-07]
CHR Extension: (Google Docs) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-07]
CHR Extension: (Google Drive) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-07]
CHR Extension: (YouTube) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-07]
CHR Extension: (Adblock Plus) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-07-07]
CHR Extension: (Google Search) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-07]
CHR Extension: (Google Sheets) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-07]
CHR Extension: (Ghostery) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2015-07-07]
CHR Extension: (Google Wallet) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-07]
CHR Extension: (Google Quick Scroll) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2015-07-07]
CHR Extension: (Gmail) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-07]
CHR HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2013-08-06]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1706744 2013-11-01] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-11-01] (IVT Corporation)
R2 CreoService; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [1366488 2013-08-23] (CryptoMill Technologies Ltd.)
R2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2013-08-08] () [File not signed]
R2 CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-07-15] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-07-15] (CyberLink)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2013-08-06] (DigitalPersona, Inc.)
R2 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [558392 2013-08-07] (Hewlett-Packard Company)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-06-02] (SafeNet Inc.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-08-01] (Hewlett-Packard Company)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [14696 2013-07-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2015-05-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2014-12-11] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-09-23] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1143432 2013-07-18] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [337920 2013-07-04] (IDT, Inc.) [File not signed]
S4 Stale Mix; C:\Program Files (x86)\Stale Mix\Stale Mix.exe [8015996 2015-06-24] () [File not signed] <==== ATTENTION
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-09-23] (Intel® Corporation)
S2 Intel(R) ME Service; "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-04-10] (Advanced Micro Devices, Inc.)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [32992 2013-10-08] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [69344 2013-08-22] (IVT Corporation)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [132920 2013-04-24] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1385272 2013-08-08] (Motorola Solutions, Inc.)
S3 btmlehid; C:\Windows\system32\drivers\btmlehid.sys [76088 2013-01-22] (Motorola Solutions, Inc.)
R2 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-06-13] (Hewlett-Packard Company)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-06-02] (SafeNet Inc.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-07-30] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [118216 2013-09-09] (Intel Corporation)
R3 IceKore; C:\Windows\System32\DRIVERS\IceKore.sys [397784 2013-08-19] (CryptoMill Technologies Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-12-11] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw02.sys [3429144 2014-10-06] (Intel Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-12-05] (WinMagic Inc.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [418520 2013-06-17] (Realsil Semiconductor Corporation)
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-12-05] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-12-05] (WinMagic Inc.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1512952 2013-08-08] (Sunplus)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-21] (Windows (R) Win 7 DDK provider)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [32992 2013-10-08] (IVT Corporation)
S3 SmbDrv; \SystemRoot\system32\drivers\Smb_driver_AMDASF.sys [X]
S3 SmbDrvI; \SystemRoot\system32\drivers\Smb_driver_Intel.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-15 02:10 - 2015-07-15 02:11 - 00023103 _____ C:\Users\Lucas\Desktop\FRST.txt
2015-07-15 02:10 - 2015-07-15 02:10 - 02133504 _____ (Farbar) C:\Users\Lucas\Desktop\FRST64.exe
2015-07-15 01:44 - 2015-07-15 01:44 - 00000004 ____H C:\ProgramData\cm-lock
2015-07-15 01:43 - 2015-07-15 01:53 - 00001078 _____ C:\Windows\system32dbgraw.bmp
2015-07-15 01:10 - 2015-07-15 01:14 - 00000000 ____D C:\Windows\pss
2015-07-15 00:25 - 2015-07-15 00:25 - 00000733 _____ C:\Users\Lucas\Desktop\checkup.txt
2015-07-15 00:15 - 2015-07-15 00:15 - 00007468 _____ C:\Users\Lucas\Desktop\eset.txt
2015-07-14 22:52 - 2015-07-14 22:52 - 00000000 ____D C:\Program Files (x86)\ESET
2015-07-14 22:30 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-14 22:30 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 22:30 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-14 22:30 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-14 22:30 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 22:30 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-14 22:30 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-14 22:30 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 22:30 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-14 22:30 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-14 22:30 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 22:30 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-14 22:30 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-14 22:30 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-14 22:30 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-14 22:30 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-14 22:30 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 22:30 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 22:30 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 22:30 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 22:30 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-14 22:30 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 22:30 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-14 22:30 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 22:30 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 22:30 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 22:30 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-14 22:30 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-14 22:30 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-14 22:30 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 22:30 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-14 22:30 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-14 22:30 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 22:30 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-14 22:30 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-14 22:30 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-14 22:30 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 22:30 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 22:30 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 22:30 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 22:30 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 22:30 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-14 22:30 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 22:30 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 22:28 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 22:28 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-14 22:28 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 22:28 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 22:28 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 22:28 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-14 22:28 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 22:28 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 22:28 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 22:28 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 22:28 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 22:28 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 22:28 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-14 22:28 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-14 22:28 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-14 22:28 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-14 22:28 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-14 22:28 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-14 22:28 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-14 22:28 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-14 22:28 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-14 22:28 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-14 22:28 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-14 22:28 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-14 22:28 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-14 22:28 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-14 22:28 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-14 22:28 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-14 22:28 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-14 22:28 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-14 22:28 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-14 22:28 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-14 22:28 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 22:28 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-14 22:28 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 22:27 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-14 22:27 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-14 22:27 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-14 22:27 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-14 22:27 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-14 22:27 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-14 22:27 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 22:27 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 22:27 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-14 22:27 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 22:27 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 22:27 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-14 22:27 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-14 22:27 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-14 22:27 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-14 22:27 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-14 22:27 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-14 22:27 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-14 22:27 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-14 22:27 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-14 22:27 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-14 22:27 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-14 22:27 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 22:27 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-14 22:27 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-14 22:27 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-14 22:27 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-14 22:27 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-14 22:27 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-14 22:21 - 2015-07-03 19:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-14 22:21 - 2015-07-03 19:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-14 22:21 - 2015-07-03 19:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-14 22:21 - 2015-07-03 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-14 22:21 - 2015-07-03 18:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-14 22:21 - 2015-07-03 18:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-13 08:31 - 2015-07-13 08:31 - 00000756 _____ C:\Users\Lucas\Desktop\Start Emsisoft Emergency Kit.lnk
2015-07-13 08:31 - 2015-07-13 08:31 - 00000000 ____D C:\EEK
2015-07-13 08:22 - 2015-07-13 08:22 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-07-07 22:58 - 2015-07-15 02:10 - 00000000 ____D C:\FRST
2015-07-07 22:46 - 2015-07-07 22:46 - 00001440 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-07 22:46 - 2015-07-07 22:46 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2015-07-07 22:19 - 2015-07-14 22:34 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-07 22:19 - 2015-07-07 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-07 22:17 - 2015-07-15 01:43 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-07 22:17 - 2015-07-15 01:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-07 22:17 - 2015-07-07 22:23 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-07 22:17 - 2015-07-07 22:23 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-07 22:17 - 2015-07-07 22:19 - 00000000 ____D C:\Users\Lucas\AppData\Local\Google
2015-07-07 22:17 - 2015-07-07 22:19 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-07 22:17 - 2015-07-07 22:17 - 00000000 ____D C:\Users\Lucas\AppData\Local\Deployment
2015-07-07 22:17 - 2015-07-07 22:17 - 00000000 ____D C:\Users\Lucas\AppData\Local\Apps\2.0
2015-07-07 21:08 - 2015-07-07 21:08 - 00000207 _____ C:\Windows\tweaking.com-regbackup-LUCAS-HP-Windows-7-Professional-(64-bit).dat
2015-07-07 21:08 - 2015-07-07 21:08 - 00000000 ____D C:\RegBackup
2015-07-07 19:43 - 2015-07-14 03:01 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-07 19:43 - 2015-07-07 19:43 - 00001139 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-07 19:43 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-07 19:43 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-07 19:43 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-03 13:23 - 2015-07-03 13:23 - 00003288 ____N C:\bootsqm.dat
2015-07-02 14:21 - 2015-07-02 14:21 - 00000445 _____ C:\Windows\SynInst.log
2015-07-02 14:21 - 2015-07-02 14:21 - 00000000 ____D C:\ProgramData\Synaptics
2015-07-01 22:52 - 2015-07-01 22:52 - 00000066 _____ C:\Windows\SysWOW64\sn.txt
2015-07-01 10:28 - 2015-07-01 11:41 - 00000198 ____H C:\Users\Lucas\Desktop\Zeichnung1.dwl2
2015-07-01 10:28 - 2015-07-01 11:41 - 00000048 ____H C:\Users\Lucas\Desktop\Zeichnung1.dwl
2015-07-01 10:11 - 2015-07-02 13:57 - 00000000 ____D C:\Users\Lucas\Desktop\Bauaufnahme
2015-06-30 13:15 - 2015-06-30 13:15 - 00000199 ____H C:\Users\Lucas\Documents\Zeichnung1.dwl2
2015-06-30 13:15 - 2015-06-30 13:15 - 00000049 ____H C:\Users\Lucas\Documents\Zeichnung1.dwl
2015-06-30 13:05 - 2015-06-30 13:05 - 00000400 _____ C:\Users\Lucas\AppData\Local\CilJT.vbs
2015-06-30 13:05 - 2015-06-30 13:05 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocToPDFConverter
2015-06-30 13:05 - 2015-06-30 13:05 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\DocToPDFConverter
2015-06-30 12:45 - 2015-06-30 12:45 - 00001389 _____ C:\Users\Lucas\Documents\Zeichnung1_Bks_BKS.prk
2015-06-29 21:40 - 2015-06-30 12:26 - 00000000 ____D C:\Users\Lucas\Desktop\Fassadenplatten Baukonstruktion
2015-06-28 18:58 - 2015-07-06 18:38 - 00003450 _____ C:\Windows\System32\Tasks\Vroifhit
2015-06-28 18:53 - 2015-06-28 18:53 - 00000000 _____ C:\places.sqlite
2015-06-28 12:59 - 2015-06-28 12:59 - 00003174 _____ C:\Windows\System32\Tasks\tet3008
2015-06-27 11:00 - 2015-07-07 21:00 - 00000000 ____D C:\AdwCleaner
2015-06-26 18:11 - 2015-06-27 10:37 - 00003458 _____ C:\Windows\System32\Tasks\Evoemdreexse
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\ProgramData\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files\WIBU-SYSTEMS
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files (x86)\CodeMeter
2015-06-25 12:31 - 2015-06-25 13:42 - 00029272 _____ C:\Users\Lucas\Documents\Zeichnung1_recover.dwg
2015-06-24 13:08 - 2015-06-24 13:08 - 00000121 _____ C:\Users\Lucas\Documents\acad.err
2015-06-24 08:51 - 2015-06-24 08:51 - 00000000 ____D C:\Program Files (x86)\Stale Mix
2015-06-24 08:09 - 2015-07-14 22:09 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D593D5C0-2D8A-47BE-8828-5D8F7DF4B61A}
2015-06-22 18:07 - 2015-06-22 18:07 - 00437248 _____ C:\Users\Lucas\Desktop\Berechnungen Bauantrag.xls
2015-06-22 12:23 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-15 11:09 - 2015-06-15 11:09 - 00003152 _____ C:\Windows\System32\Tasks\{6BE45D62-7EF8-492B-BFFF-27C44B3233FC}

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-15 01:52 - 2009-07-14 06:45 - 00037408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-15 01:52 - 2009-07-14 06:45 - 00037408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-15 01:47 - 2014-10-14 15:01 - 01053099 _____ C:\Windows\WindowsUpdate.log
2015-07-15 01:44 - 2014-10-31 18:06 - 00000000 ____D C:\ProgramData\Kodak
2015-07-15 01:44 - 2014-03-18 21:50 - 00000000 ____D C:\ProgramData\PDFC
2015-07-15 01:43 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.log
2015-07-15 01:43 - 2013-11-01 16:08 - 00001018 _____ C:\Windows\SysWOW64\bscs.ini
2015-07-15 01:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-15 01:43 - 2009-07-14 06:51 - 00090650 _____ C:\Windows\setupact.log
2015-07-15 01:30 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.001
2015-07-15 01:24 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.002
2015-07-15 01:12 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.003
2015-07-15 00:28 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.004
2015-07-15 00:06 - 2015-01-29 11:15 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLucas
2015-07-15 00:06 - 2015-01-29 11:15 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForLucas.job
2015-07-14 22:44 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.005
2015-07-14 22:44 - 2009-07-14 06:45 - 00367616 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-14 22:42 - 2014-12-13 17:22 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-14 22:42 - 2014-10-20 13:46 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-14 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-14 22:34 - 2014-10-25 11:29 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 02:08 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-13 08:36 - 2014-10-29 22:47 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2015-07-09 13:41 - 2014-10-14 21:07 - 00000000 ____D C:\Users\Lucas\AppData\Local\Akamai
2015-07-09 13:36 - 2010-11-21 05:47 - 00763820 _____ C:\Windows\PFRO.log
2015-07-08 02:47 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\addins
2015-07-07 22:54 - 2014-12-08 13:12 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2EA83ECB-45D2-4CF8-80F6-39926218F11E}
2015-07-07 22:53 - 2014-05-23 09:50 - 00700380 _____ C:\Windows\system32\perfh007.dat
2015-07-07 22:53 - 2014-05-23 09:50 - 00149986 _____ C:\Windows\system32\perfc007.dat
2015-07-07 22:53 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-07 22:47 - 2014-12-08 13:12 - 00096040 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-07 22:47 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-07-07 21:00 - 2014-10-14 15:05 - 00000984 _____ C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-07 21:00 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-07 20:53 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages
2015-07-07 20:50 - 2014-10-14 15:04 - 00000000 ____D C:\Users\Lucas
2015-07-07 20:48 - 2015-05-26 00:43 - 00000000 ____D C:\Program Files (x86)\News Factory
2015-07-07 20:10 - 2015-05-20 10:46 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-05 12:08 - 2010-11-21 05:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 10:26 - 2015-05-20 10:21 - 00000000 ___HD C:\ProgramData\utk
2015-07-03 08:43 - 2014-10-25 11:29 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-01 22:52 - 2015-05-26 00:32 - 00001312 __RSH C:\ProgramData\ntuser.pol
2015-06-29 11:36 - 2015-05-25 23:45 - 00001478 _____ C:\Users\Lucas\Documents\plot.log
2015-06-29 09:58 - 2014-10-14 15:06 - 00000000 ____D C:\Users\Lucas\AppData\Local\PDFC
2015-06-28 17:32 - 2009-07-14 04:34 - 00000505 _____ C:\Windows\win.ini
2015-06-26 19:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-25 13:43 - 2015-05-29 09:34 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\kubit
2015-06-25 13:42 - 2014-05-23 09:14 - 00054710 _____ C:\Windows\DPINST.LOG
2015-06-25 13:03 - 2015-05-29 09:45 - 00000000 ____D C:\Windows\system32\appmgmt
2015-06-22 17:54 - 2015-05-30 11:56 - 00000000 ____D C:\Users\Lucas\Desktop\Daten
2015-06-15 11:28 - 2015-06-01 10:12 - 00000045 _____ C:\user.js

==================== Files in the root of some directories =======

2015-06-30 13:05 - 2015-06-30 13:05 - 0000400 _____ () C:\Users\Lucas\AppData\Local\CilJT.vbs
2014-10-31 19:21 - 2014-10-31 19:21 - 0000236 _____ () C:\Users\Lucas\AppData\Local\LaunchHomeCenter.log
2015-06-02 14:00 - 2015-06-02 14:00 - 0000000 _____ () C:\Users\Lucas\AppData\Local\Temp.dat
2015-07-15 01:44 - 2015-07-15 01:44 - 0000004 ____H () C:\ProgramData\cm-lock
2014-10-15 20:56 - 2014-10-15 20:56 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-23 09:38

==================== End of log ============================
         
--- --- ---


[CODE]Additional
FRST Logfile:
Code:
ATTFilter
scan result of Farbar Recovery Scan Tool (x64) Version:13-07-2015
Ran by Lucas at 2015-07-15 02:11:40
Running from C:\Users\Lucas\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2790422825-2525740105-2010072699-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-2790422825-2525740105-2010072699-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2790422825-2525740105-2010072699-1003 - Limited - Enabled)
Lucas (S-1-5-21-2790422825-2525740105-2010072699-1002 - Administrator - Enabled) => C:\Users\Lucas

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated)
aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{C4CB2534-82F4-F4AF-5767-9EE64EF9EB64}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoCAD 2015 - Deutsch (German) (Version: 20.0.210.0 - Autodesk) Hidden
AutoCAD 2015 - Deutsch (German) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - Deutsch (German) (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.2.3.1000 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk AutoCAD 2015 - Deutsch (German) (HKLM\...\AutoCAD 2015 - Deutsch (German)) (Version: 20.0.51.0 - Autodesk)
Autodesk AutoCAD 2015 - Deutsch (German) SP2 (HKLM\...\AutoCAD 2015 - Deutsch (German) SP2) (Version: 20.0.210.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{B0E4871A-09A2-49C3-9A9E-D6409B37FD3A}) (Version: 4.36.2452 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.1.39 - Autodesk)
Autodesk ReCap (Version: 1.3.1.39 - Autodesk) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
C4USelfUpdater (x32 Version: 1.00.0000 - Your Company Name) Hidden
center (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
CodeMeter Runtime Kit v5.21 (HKLM\...\{05CA69B3-6699-425F-8223-39E4E00B6581}) (Version: 5.21.1478.500 - WIBU-SYSTEMS AG)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3115 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.2.1.4224 - CyberLink Corp.)
DocToPDFConverter (HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\DocToPDFConverter) (Version: 01.00.00.00 - VolatoTech)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
essentials (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.2 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{84663FDA-1374-4048-9869-DD4A8784785A}) (Version: 6.0.16.1 - Hewlett-Packard Company)
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 8.2.0.1663 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{7ED7BF91-D145-480A-B206-6891576F6935}) (Version: 4.6.12.1 - Hewlett-Packard Company)
HP Device Access Manager (HKLM\...\{9F7FF800-8C11-4741-8D20-92E43CA02FD6}) (Version: 8.2.0.10 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{7940DAB9-AC72-4422-8908-DCF58C2C1D21}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Drive Encryption (HKLM\...\HPDriveEncryption) (Version: 8.6.11.10 - Hewlett-Packard Company)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{240B2BF7-E7E6-425C-A2A4-A3149189BF7F}) (Version: 2.3.1 - Hewlett-Packard Company)
HP File Sanitizer (HKLM-x32\...\{547607B0-3294-4ECA-8F5E-921404676CBB}) (Version: 8.4.11.1 - Hewlett-Packard Company)
HP HD Webcam Driver (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.8.30 - SunplusIT)
HP Hotkey Support (HKLM-x32\...\{C807BEFB-0F17-41AC-B307-D7B5E1553040}) (Version: 5.0.20.1 - Hewlett-Packard Company)
HP PageLift (HKLM-x32\...\{708ABF62-5D7A-4550-823A-1F9EFA63645A}) (Version: 1.0.11.1 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{5C2D96B7-0468-4450-8BD9-63AB796D72CF}) (Version: 3.4.11.0 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{7EF08127-4C30-4C05-8CEB-544F8A71C080}) (Version: 8.7.1.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{A3B64280-DE4C-40F0-86BB-CCB2A6056BA2}) (Version: 7.3.32.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
HP System Default Settings (HKLM-x32\...\{3A61A282-4F08-4D43-920C-DC30ECE528E8}) (Version: 2.6.1 - Hewlett-Packard Company)
HP Theft Recovery (HKLM-x32\...\InstallShield_{BAC712C6-4061-4C9F-AB58-A5C53E76704A}) (Version: 8.2.0.9 - Hewlett-Packard Company)
HP Trust Circles (HKLM-x32\...\HP Trust Circles) (Version: 8.2.15.16418 - CryptoMill Technologies)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6486.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3993 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1337.1) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0366 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.7.3.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{201B03D6-FDDA-4C70-8A15-887F5B3CE365}) (Version: 4.2.19.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e63d3cb3-0b4d-44ca-aba0-ba433f2f37fd}) (Version: 17.13.0 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kodak AIO Printer (Version: 7.8.1.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.8.5.2 - Eastman Kodak Company)
kubit Box 2015 - PhoToPlan Pro Deutsch für AutoCAD (LT) 2015 64-bit (HKLM-x32\...\kubitBox_2015_DE_AC2015_is1) (Version: 15.0.14.13228 - kubit GmbH, Germany)
kubit Box version manager (HKLM-x32\...\kubitBox_version_manager_is1) (Version: 15.0.14.13228 - kubit GmbH, Germany)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
OEM Application Profile (HKLM-x32\...\{CCBD6679-C7CF-2030-2A1F-3640781DF4F4}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
PDF Complete Corporate Edition (HKLM-x32\...\PDF Complete) (Version: 4.1.50 - PDF Complete, Inc)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.5.0 - Prolific Technology INC)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Ralink Bluetooth Stack (HKLM\...\{BCDD86BE-1426-19BA-D1D1-C94D92FD6281}) (Version: 11.0.748.0 - Mediatek)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.1.9200.18 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.73.618.2013 - Realtek)
Sentinel Runtime (HKLM-x32\...\{678E25DE-EB70-4B01-9BAB-649F613A8434}) (Version: 6.63.1.43776 - SafeNet Inc.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Validity Fingerprint Sensor Driver (HKLM\...\{F5850B80-27F9-406E-91D3-1329F813BA63}) (Version: 4.5.130.0 - Validity Sensors, Inc.)
Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\de-DE\acadficn.dll (Autodesk, Inc.)

==================== Restore Points =========================

27-06-2015 10:49:56 LuxuryCasino wird entfernt
29-06-2015 21:42:24 Windows Update
02-07-2015 14:21:59 Removed SketchUp-Import.
02-07-2015 22:39:15 Windows Update
06-07-2015 18:44:56 Windows Update
13-07-2015 08:39:22 Windows Update
14-07-2015 22:30:29 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02C49FCB-27F0-45F4-BC7A-A583D99363DA} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {176D0F84-3664-4CAC-9771-7B84432AD161} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-09] (Hewlett-Packard Company)
Task: {416373CD-3D9F-41FE-AE65-29CDA7FBA0E9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-07] (Google Inc.)
Task: {4EA02EBE-7251-40F9-86BC-E83D7CF55CF6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {5732EE0A-F5DF-4DD2-A76B-B5D973F1466A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-09] (Hewlett-Packard Company)
Task: {5910D080-AB2B-4D31-93E5-ADB626C4AF40} - System32\Tasks\HPCeeScheduleForLucas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {6F66536E-160C-44D6-AFCB-5B1943133EA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-07] (Google Inc.)
Task: {95FDDBBC-6076-46B7-B551-AFED27391CC8} - System32\Tasks\{6BE45D62-7EF8-492B-BFFF-27C44B3233FC} => pcalua.exe -a C:\Users\Lucas\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cmi
Task: {BC2252B5-B587-48D6-BB8E-27A51818B1B2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {C5E6F396-DA0C-4515-92D3-E89DEA5E894F} - System32\Tasks\Vroifhit => C:\ProgramData\Vroifhit\1.0.1.0\irpnaxna.exe
Task: {EEEDF8D0-FA2C-4911-9B2A-ED0CA1F77305} - System32\Tasks\tet3008 => C:\Program
Task: {F29679C7-C075-4C03-A64D-09B1383A728E} - System32\Tasks\Evoemdreexse => C:\ProgramData\Evoemdreexse\1.0.1.0\gawrufia.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLucas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (Whitelisted) ==============

2013-05-22 22:21 - 2013-05-22 22:21 - 00299832 _____ () C:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00029432 _____ () C:\Windows\system32\BsTrace.dll
2013-08-08 00:02 - 2013-08-08 00:02 - 00007168 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
2013-11-01 16:48 - 2013-11-01 16:48 - 00016632 _____ () C:\Windows\system32\BsHelpCSps.dll
2014-10-15 21:06 - 2014-12-05 04:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2014-10-15 21:06 - 2014-12-05 04:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2014-10-11 14:06 - 2014-10-11 14:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00080120 _____ () C:\Windows\system32\BsProfilefunc.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00371448 _____ () C:\Windows\system32\BsExtendFunc.dll
2013-11-01 16:46 - 2013-11-01 16:46 - 00026360 _____ () C:\Windows\SysWOW64\BsTrace.dll
2015-07-14 22:33 - 2015-07-13 23:55 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libglesv2.dll
2015-07-14 22:33 - 2015-07-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libegl.dll
2013-06-05 20:35 - 2013-06-05 20:35 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2014-12-11 13:05 - 2014-12-11 13:04 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Lucas\Downloads\kubitBox_PhoToPlan-Pro_15.0.13.11782_setup.exe:BDU

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Stale Mix => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodeMeter Control Center.lnk => C:\Windows\pss\CodeMeter Control Center.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Lucas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Download.lnk => C:\Windows\pss\Download.lnk.Startup
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Lucas\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: Conime => %windir%\system32\conime.exe
MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{A1D60A40-05C0-4C86-AF1F-D4DA3FD51773}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8CA4529A-95DB-4FCC-B067-3C2C50812EAE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{93D8B6AC-CF49-47C8-8005-B5AFF56D5E21}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DABCFFD3-8D45-417D-BA14-C69AA52194BF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D5CEC9CA-F808-4AE0-AE25-77FBFE0B8886}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B501E2D1-BFFE-4441-A2D5-0FC0CD168706}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{1C85D374-59C1-468A-9018-9745D7DC5093}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{8F953712-E433-49DF-A002-A7D376666C04}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{E27FB7D7-5D2D-4972-ADB8-A44C95E26CF7}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{4BE97F83-9D3F-4887-ACE6-34AE3E1563EA}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{73153180-78AF-42E7-8D05-646A2C56EADC}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{45D9AF8C-9A52-4BAA-8376-CDBE399CE0A1}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [TCP Query User{13BB74D3-8622-4721-8081-8DB59758D2E6}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{EB7E3CB3-19BF-4C5F-9CC4-421DBB9AE30C}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{D00B7FD5-A627-4B26-AD1C-D62B27AB678F}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{57221968-5EE3-42EA-B07D-EA46287A9873}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [{05E17465-AEF7-498E-9F7D-CE74E34BAE7C}] => (Allow) LPort=50248
FirewallRules: [{D11437EB-8660-49A3-B67A-3C3277FBD4FC}] => (Allow) LPort=9322
FirewallRules: [{1BA7CC1E-A17F-49C2-ABF2-4E05D85223CE}] => (Allow) LPort=5353
FirewallRules: [{57239587-E810-4DB8-834C-3D27C837E283}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{537424BB-BC6F-4C55-B44B-AA20A6262653}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{ACF4103F-AB52-44FF-9C85-D5D2F779230F}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{494908CC-36F8-43FE-9357-84C1AFFEB07A}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{DCA08705-B65E-4EFD-ABB3-46B84993610B}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{881F2FBD-55FF-4CEF-AB32-6291C0E36F3C}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{8B8E7CEC-B865-4F23-BEA1-B2F8F059920D}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{0AAC8912-7341-4CE6-9D21-11B23950AE02}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{2955AF9E-D6E7-4CEC-B461-1363520B78F5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{07C30D84-7679-4C48-8267-7D23B6B4DCE5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{7E0026E3-F8B5-44F8-8A05-E401A687866D}] => (Allow) LPort=9322
FirewallRules: [{FB351028-8D36-44CB-A864-B4AB8D787A24}] => (Allow) LPort=5353
FirewallRules: [{B391B01C-A4F0-4EAC-A9A3-FE98A2177DA2}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{F1760CA4-B264-4C33-BB7E-DF84F53F6C96}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{FDF86C20-8BEE-49D5-9AE6-097F1EEC0C01}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{6185CA28-156A-4733-964F-39087EA25F87}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{E13DD6DB-DFB8-41B1-B321-A4A59EAD6D45}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{D3FB534A-C803-478C-9713-5432B270CB96}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{639FB50C-153F-4503-9882-79ABEBE95D22}] => (Allow) C:\Windows\system32\hasplms.exe
FirewallRules: [{9C0E9C43-A297-4808-A067-160060270005}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{F30B81AB-9AEB-4FFA-8337-74BDFA4D1D9A}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
FirewallRules: [{FFD32437-24D0-4873-8899-A9B6C9418BF8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Bluetooth Server
Description: Bluetooth Server
Class Guid: {34446e8e-37b4-4b16-9da6-bea2db33465a}
Manufacturer: Intel Corporation
Service: btmaux
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/15/2015 02:07:58 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 01:43:26 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 01:30:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 01:30:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 01:30:17 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 01:23:54 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 01:11:39 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 12:29:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.


System errors:
=============
Error: (07/15/2015 01:46:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:33:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:26:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:18:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:15:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Update" wurde mit folgendem Fehler beendet: 
%%-2147467243

Error: (07/15/2015 01:14:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 12:31:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 12:18:32 AM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )
Description: Vom Echtzeitschutz-Feature von %%860 wurde ein Fehler festgestellt

	Feature: %%886

	Fehlercode: 0x80070005

	Fehlerbeschreibung: Zugriff verweigert 

	Grund: %%858

Error: (07/15/2015 12:18:28 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (07/14/2015 11:05:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


Microsoft Office:
=========================
Error: (07/15/2015 02:07:58 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 01:43:26 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 01:30:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 01:30:49 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 01:30:17 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 01:23:54 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 01:11:39 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 12:29:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.


CodeIntegrity Errors:
===================================
  Date: 2015-06-29 21:44:47.261
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.279
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.246
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.215
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz
Percentage of memory in use: 32%
Total physical RAM: 8073.11 MB
Available physical RAM: 5412.85 MB
Total Virtual: 16144.43 MB
Available Virtual: 13141.49 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:682.75 GB) (Free:603.37 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:12.88 GB) (Free:1.41 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.96 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 206BA7A1)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=682.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

==================== End of log ============================
         
Und natürlich noch das Fixlog:

Code:
ATTFilter
Fix result of Farbar Recovery Scan Tool (x64) Version:12-07-2015
Ran by Lucas at 2015-07-14 22:09:12 Run:1
Running from C:\Users\Lucas\Desktop
Loaded Profiles: Lucas (Available Profiles: Lucas & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Task: {242F4187-E746-4A99-BC3C-78D0F0DB804D} - System32\Tasks\ZHLUVDDS1 => C:\ProgramData\TomorrowGames\TomorrowGames.exe <==== ATTENTION

Task: {7486673A-A35D-4491-BFD2-62619A991C04} - System32\Tasks\DataKeeper => c:\programdata\{3684b0ec-8722-5dc0-3684-4b0ec872c3b2}\1539358894756496780b.exe <==== ATTENTION

Task: {992714DC-0A07-4F04-919C-8BA74618CE44} - \WordShark Auto Updater 1.10.0.19 Pending Update No Task File <==== ATTENTION

Task: {ADA41147-15B1-46D2-89AA-8B5D4CAA849F} - \SMW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32 No Task File <==== ATTENTION

Task: {C3B9BD71-AE02-42B4-8EB0-D21C7D0F4C20} - \SPBIW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32 No Task File <==== ATTENTION

Task: {EB599B91-AFB4-40E9-85C3-08F1AABC0E97} - System32\Tasks\RBCHDHKMDVJNBIYG => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION

Task: {ECA0C24F-1181-4152-8F86-6664DD76EC67} - System32\Tasks\FileBurst => c:\programdata\{35db870e-133f-8d99-35db-b870e1331c38}\3014381927046394415e.exe <==== ATTENTION

Task: {ED668FCF-99AE-4F58-80C4-DEC7F6697605} - System32\Tasks\HYXFDJNCCX1 => C:\ProgramData\LolliScan\LolliScan.exe <==== ATTENTION

Task: {FB5FD938-609B-4749-BF9B-403C7AED27AC} - \SMWUpd No Task File <==== ATTENTION

Task: {FFE861BF-4A14-42F4-BC21-DC8CF935AF74} - \WordShark Auto Updater 1.10.0.19 Core No Task File <==== ATTENTION

Task: C:\Windows\Tasks\DataKeeper.job => c:\programdata\{3684b0ec-8722-5dc0-3684-4b0ec872c3b2}\1539358894756496780b.exe <==== ATTENTION

Task: C:\Windows\Tasks\FileBurst.job => c:\programdata\{35db870e-133f-8d99-35db-b870e1331c38}\3014381927046394415e.exe <==== ATTENTION

Task: C:\Windows\Tasks\HYXFDJNCCX1.job => C:\ProgramData\LolliScan\LolliScan.exe <==== ATTENTION

Task: C:\Windows\Tasks\RBCHDHKMDVJNBIYG.job => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION

Task: C:\Windows\Tasks\ZHLUVDDS1.job => C:\ProgramData\TomorrowGames\TomorrowGames.exe <==== ATTENTION

Emptytemp:
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{242F4187-E746-4A99-BC3C-78D0F0DB804D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{242F4187-E746-4A99-BC3C-78D0F0DB804D}" => key removed successfully
C:\Windows\System32\Tasks\ZHLUVDDS1 => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ZHLUVDDS1" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7486673A-A35D-4491-BFD2-62619A991C04}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7486673A-A35D-4491-BFD2-62619A991C04}" => key removed successfully
C:\Windows\System32\Tasks\DataKeeper => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DataKeeper" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{992714DC-0A07-4F04-919C-8BA74618CE44}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{992714DC-0A07-4F04-919C-8BA74618CE44}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordShark Auto Updater 1.10.0.19 Pending Update" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ADA41147-15B1-46D2-89AA-8B5D4CAA849F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ADA41147-15B1-46D2-89AA-8B5D4CAA849F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SMW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3B9BD71-AE02-42B4-8EB0-D21C7D0F4C20}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3B9BD71-AE02-42B4-8EB0-D21C7D0F4C20}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_313035363230333430362d5523372a34452d4132575b32" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EB599B91-AFB4-40E9-85C3-08F1AABC0E97}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB599B91-AFB4-40E9-85C3-08F1AABC0E97}" => key removed successfully
C:\Windows\System32\Tasks\RBCHDHKMDVJNBIYG => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RBCHDHKMDVJNBIYG" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ECA0C24F-1181-4152-8F86-6664DD76EC67}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECA0C24F-1181-4152-8F86-6664DD76EC67}" => key removed successfully
C:\Windows\System32\Tasks\FileBurst => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FileBurst" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ED668FCF-99AE-4F58-80C4-DEC7F6697605}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED668FCF-99AE-4F58-80C4-DEC7F6697605}" => key removed successfully
C:\Windows\System32\Tasks\HYXFDJNCCX1 => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HYXFDJNCCX1" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FB5FD938-609B-4749-BF9B-403C7AED27AC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB5FD938-609B-4749-BF9B-403C7AED27AC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SMWUpd" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FFE861BF-4A14-42F4-BC21-DC8CF935AF74}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FFE861BF-4A14-42F4-BC21-DC8CF935AF74}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordShark Auto Updater 1.10.0.19 Core" => key removed successfully
C:\Windows\Tasks\DataKeeper.job => moved successfully.
C:\Windows\Tasks\FileBurst.job => moved successfully.
C:\Windows\Tasks\HYXFDJNCCX1.job => moved successfully.
C:\Windows\Tasks\RBCHDHKMDVJNBIYG.job => moved successfully.
C:\Windows\Tasks\ZHLUVDDS1.job => moved successfully.
EmptyTemp: => 2.3 GB temporary data Removed.


The system needed a reboot.. 

==== End of Fixlog 22:09:47 ====
         
--- --- ---


Der Laptop läuft soweit, ist noch etwas arg langsam wenns ums booten geht, da konnte der Cleanboot aber auch keine Abhilfe schaffen.

Und mir sind in den FRST+Additionlogfiles noch ein paar ATTENTIONS aufgefallen.
__________________
Beste Grüße,

Kuhlambo12

Geändert von kuhlambo12 (15.07.2015 um 01:26 Uhr)

Alt 15.07.2015, 14:09   #26
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
S4 Stale Mix; C:\Program Files (x86)\Stale Mix\Stale Mix.exe [8015996 2015-06-24] () [File not signed] <==== ATTENTION
C:\Program Files (x86)\Stale Mix
C:\ProgramData\utk
AppInit_DLLs: Files => Files File not found
AppInit_DLLs-x32: c:\program files c:\program files c:\programdata\lolliscan\lolliscan32.dll => "c:\programdata\lolliscan\lolliscan32.dll" File not found
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Policies\Explorer: [] 
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 15.07.2015, 16:10   #27
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Hier das Fixlog:

Code:
ATTFilter
Fix result of Farbar Recovery Scan Tool (x64) Version:13-07-2015
Ran by Lucas at 2015-07-15 16:59:35 Run:2
Running from C:\Users\Lucas\Desktop
Loaded Profiles: Lucas (Available Profiles: Lucas & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
S4 Stale Mix; C:\Program Files (x86)\Stale Mix\Stale Mix.exe [8015996 2015-06-24] () [File not signed] <==== ATTENTION
C:\Program Files (x86)\Stale Mix
C:\ProgramData\utk
AppInit_DLLs: Files => Files File not found
AppInit_DLLs-x32: c:\program files c:\program files c:\programdata\lolliscan\lolliscan32.dll => "c:\programdata\lolliscan\lolliscan32.dll" File not found
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Policies\Explorer: [] 
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
*****************

Stale Mix => Service removed successfully
C:\Program Files (x86)\Stale Mix => moved successfully.
C:\ProgramData\utk => moved successfully.
"Files" => value data removed successfully.
"c:\program files c:\program files c:\programdata\lolliscan\lolliscan32.dll" => value data removed successfully.
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value removed successfully
C:\Windows\system32\GroupPolicy\Machine => moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully.
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully.
"HKLM\SOFTWARE\Policies\Google" => key removed successfully


The system needed a reboot.. 

==== End of Fixlog 16:59:35 ====
         
Und das frische FRST:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-07-2015
Ran by Lucas (administrator) on LUCAS-HP on 15-07-2015 17:06:11
Running from C:\Users\Lucas\Desktop
Loaded Profiles: Lucas (Available Profiles: Lucas & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CryptoMill Technologies Ltd.) C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Hewlett-Packard Company) C:\Windows\SysWOW64\flcdlock.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CORESHREDDER.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\CompatTel\wicainventory.exe
() C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-07-04] (IDT, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286056 2013-07-30] (Intel Corporation)
HKLM\...\Run: [CryptoMill Refresh] => C:\Program Files\Hewlett-Packard\HP Trust Circles\ceflauncher -m refresh
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2750840 2013-12-11] (Eastman Kodak Company)
HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167488 2013-06-24] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2013-06-24] (CyberLink)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-08-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-08-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2013-08-16] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HP File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\Coreshredder.exe [2213592 2013-08-07] (Hewlett-Packard)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-11-01] (IVT Corporation)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-10-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)
Lsa: [Notification Packages] DPPassFilter scecli
ShellIconOverlayIdentifiers: [+1TBIcon] -> {B9C55E85-DED6-4911-82F3-83CF1CAB2898} => C:\Program Files\Hewlett-Packard\HP Trust Circles\tbicon.dll [2013-08-23] (CryptoMill Technologies Ltd.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [+1TBIcon] -> {B9C55E85-DED6-4911-82F3-83CF1CAB2898} => C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\tbicon.dll [2013-08-23] (CryptoMill Technologies Ltd.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2BB214E3-8E96-4BCA-B8B5-ED29CE975B70}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{87AD920B-9C51-4107-BBC6-C1E951514BCE}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{B1191B39-F356-41FE-8E8D-2A623572A1B2}: [DhcpNameServer] 192.168.100.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-12-11] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-12-11] (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-07-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-07-07] (Google Inc.)
FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2013-08-06] (DigitalPersona, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2014-05-23]

Chrome: 
=======
CHR Profile: C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-07]
CHR Extension: (Google Docs) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-07]
CHR Extension: (Google Drive) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-07]
CHR Extension: (YouTube) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-07]
CHR Extension: (Adblock Plus) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-07-07]
CHR Extension: (Google Search) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-07]
CHR Extension: (Google Sheets) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-07]
CHR Extension: (Ghostery) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2015-07-07]
CHR Extension: (Google Wallet) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-07]
CHR Extension: (Gmail) - C:\Users\Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-07]
CHR HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2013-08-06]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1706744 2013-11-01] (IVT Corporation)
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-11-01] (IVT Corporation)
R2 CreoService; C:\Program Files (x86)\Hewlett-Packard\HP Trust Circles\CreoSvc.exe [1366488 2013-08-23] (CryptoMill Technologies Ltd.)
R2 CtAgentService; C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe [7168 2013-08-08] () [File not signed]
R2 CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-07-15] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [294664 2013-07-15] (CyberLink)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [500048 2013-08-06] (DigitalPersona, Inc.)
R2 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [558392 2013-08-07] (Hewlett-Packard Company)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-06-02] (SafeNet Inc.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-08-01] (Hewlett-Packard Company)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [14696 2013-07-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [318568 2015-05-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2014-12-11] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-09-23] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1143432 2013-07-18] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [337920 2013-07-04] (IDT, Inc.) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-09-23] (Intel® Corporation)
S2 Intel(R) ME Service; "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-04-10] (Advanced Micro Devices, Inc.)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [32992 2013-10-08] (IVT Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [69344 2013-08-22] (IVT Corporation)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [132920 2013-04-24] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1385272 2013-08-08] (Motorola Solutions, Inc.)
S3 btmlehid; C:\Windows\system32\drivers\btmlehid.sys [76088 2013-01-22] (Motorola Solutions, Inc.)
R2 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [65752 2013-06-13] (Hewlett-Packard Company)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-06-02] (SafeNet Inc.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-07-30] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [118216 2013-09-09] (Intel Corporation)
R3 IceKore; C:\Windows\System32\DRIVERS\IceKore.sys [397784 2013-08-19] (CryptoMill Technologies Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-12-11] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\NETwsw02.sys [3429144 2014-10-06] (Intel Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
R0 PinFile; C:\Windows\System32\DRIVERS\PinFile.sys [49856 2014-12-05] (WinMagic Inc.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [418520 2013-06-17] (Realsil Semiconductor Corporation)
R0 SDDisk2K; C:\Windows\System32\DRIVERS\SDDisk2K.sys [228544 2014-12-05] (WinMagic Inc.)
R0 SDDToki; C:\Windows\System32\DRIVERS\SDDToki.sys [131264 2014-12-05] (WinMagic Inc.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1512952 2013-08-08] (Sunplus)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-21] (Windows (R) Win 7 DDK provider)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [32992 2013-10-08] (IVT Corporation)
S3 SmbDrv; \SystemRoot\system32\drivers\Smb_driver_AMDASF.sys [X]
S3 SmbDrvI; \SystemRoot\system32\drivers\Smb_driver_Intel.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-15 17:06 - 2015-07-15 17:06 - 00022634 _____ C:\Users\Lucas\Desktop\FRST.txt
2015-07-15 17:01 - 2015-07-15 17:01 - 00000004 ____H C:\ProgramData\cm-lock
2015-07-15 17:00 - 2015-07-15 17:01 - 00001078 _____ C:\Windows\system32dbgraw.bmp
2015-07-15 16:56 - 2015-07-15 16:57 - 02133504 _____ (Farbar) C:\Users\Lucas\Desktop\FRST64.exe
2015-07-15 01:10 - 2015-07-15 01:14 - 00000000 ____D C:\Windows\pss
2015-07-14 22:52 - 2015-07-14 22:52 - 00000000 ____D C:\Program Files (x86)\ESET
2015-07-14 22:30 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-14 22:30 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 22:30 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-14 22:30 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-14 22:30 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 22:30 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-14 22:30 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-14 22:30 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 22:30 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-14 22:30 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-14 22:30 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 22:30 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-14 22:30 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-14 22:30 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-14 22:30 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-14 22:30 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-14 22:30 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 22:30 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 22:30 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 22:30 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 22:30 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-14 22:30 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 22:30 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-14 22:30 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 22:30 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 22:30 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 22:30 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-14 22:30 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-14 22:30 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-14 22:30 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 22:30 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-14 22:30 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-14 22:30 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 22:30 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-14 22:30 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-14 22:30 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-14 22:30 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 22:30 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 22:30 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 22:30 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 22:30 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 22:30 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-14 22:30 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 22:30 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 22:28 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 22:28 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-14 22:28 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 22:28 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 22:28 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 22:28 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-14 22:28 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 22:28 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 22:28 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 22:28 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 22:28 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 22:28 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 22:28 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-14 22:28 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-14 22:28 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-14 22:28 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-14 22:28 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-14 22:28 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-14 22:28 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-14 22:28 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-14 22:28 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-14 22:28 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-14 22:28 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-14 22:28 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-14 22:28 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-14 22:28 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-14 22:28 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-14 22:28 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-14 22:28 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-14 22:28 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-14 22:28 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-14 22:28 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-14 22:28 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-14 22:28 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-14 22:28 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 22:28 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-14 22:28 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 22:27 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-14 22:27 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-14 22:27 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-14 22:27 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-14 22:27 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-14 22:27 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-14 22:27 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-14 22:27 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-14 22:27 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 22:27 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 22:27 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-14 22:27 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 22:27 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 22:27 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-14 22:27 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-14 22:27 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-14 22:27 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-14 22:27 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-14 22:27 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-14 22:27 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-14 22:27 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-14 22:27 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-14 22:27 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-14 22:27 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-14 22:27 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-14 22:27 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-14 22:27 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-14 22:27 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-14 22:27 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-14 22:27 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-14 22:27 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-14 22:27 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-14 22:21 - 2015-07-03 20:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-14 22:21 - 2015-07-03 19:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-14 22:21 - 2015-07-03 19:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-14 22:21 - 2015-07-03 19:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-14 22:21 - 2015-07-03 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-14 22:21 - 2015-07-03 18:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-14 22:21 - 2015-07-03 18:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-13 08:31 - 2015-07-13 08:31 - 00000756 _____ C:\Users\Lucas\Desktop\Start Emsisoft Emergency Kit.lnk
2015-07-13 08:31 - 2015-07-13 08:31 - 00000000 ____D C:\EEK
2015-07-13 08:22 - 2015-07-13 08:22 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-07-07 22:58 - 2015-07-15 17:06 - 00000000 ____D C:\FRST
2015-07-07 22:46 - 2015-07-07 22:46 - 00001440 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-07 22:46 - 2015-07-07 22:46 - 00000000 ____D C:\Users\Administrator\AppData\Local\Google
2015-07-07 22:19 - 2015-07-14 22:34 - 00002194 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-07 22:19 - 2015-07-07 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-07 22:17 - 2015-07-15 17:00 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-07 22:17 - 2015-07-15 02:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-07 22:17 - 2015-07-07 22:23 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-07 22:17 - 2015-07-07 22:23 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-07 22:17 - 2015-07-07 22:19 - 00000000 ____D C:\Users\Lucas\AppData\Local\Google
2015-07-07 22:17 - 2015-07-07 22:19 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-07 22:17 - 2015-07-07 22:17 - 00000000 ____D C:\Users\Lucas\AppData\Local\Deployment
2015-07-07 22:17 - 2015-07-07 22:17 - 00000000 ____D C:\Users\Lucas\AppData\Local\Apps\2.0
2015-07-07 21:08 - 2015-07-07 21:08 - 00000207 _____ C:\Windows\tweaking.com-regbackup-LUCAS-HP-Windows-7-Professional-(64-bit).dat
2015-07-07 21:08 - 2015-07-07 21:08 - 00000000 ____D C:\RegBackup
2015-07-07 19:43 - 2015-07-14 03:01 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-07 19:43 - 2015-07-07 19:43 - 00001139 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-07 19:43 - 2015-07-07 19:43 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-07 19:43 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-07 19:43 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-07 19:43 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-03 13:23 - 2015-07-03 13:23 - 00003288 ____N C:\bootsqm.dat
2015-07-02 14:21 - 2015-07-02 14:21 - 00000445 _____ C:\Windows\SynInst.log
2015-07-02 14:21 - 2015-07-02 14:21 - 00000000 ____D C:\ProgramData\Synaptics
2015-07-01 22:52 - 2015-07-01 22:52 - 00000066 _____ C:\Windows\SysWOW64\sn.txt
2015-07-01 10:28 - 2015-07-01 11:41 - 00000198 ____H C:\Users\Lucas\Desktop\Zeichnung1.dwl2
2015-07-01 10:28 - 2015-07-01 11:41 - 00000048 ____H C:\Users\Lucas\Desktop\Zeichnung1.dwl
2015-07-01 10:11 - 2015-07-02 13:57 - 00000000 ____D C:\Users\Lucas\Desktop\Bauaufnahme
2015-06-30 13:15 - 2015-06-30 13:15 - 00000199 ____H C:\Users\Lucas\Documents\Zeichnung1.dwl2
2015-06-30 13:15 - 2015-06-30 13:15 - 00000049 ____H C:\Users\Lucas\Documents\Zeichnung1.dwl
2015-06-30 13:05 - 2015-06-30 13:05 - 00000400 _____ C:\Users\Lucas\AppData\Local\CilJT.vbs
2015-06-30 13:05 - 2015-06-30 13:05 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DocToPDFConverter
2015-06-30 13:05 - 2015-06-30 13:05 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\DocToPDFConverter
2015-06-30 12:45 - 2015-06-30 12:45 - 00001389 _____ C:\Users\Lucas\Documents\Zeichnung1_Bks_BKS.prk
2015-06-29 21:40 - 2015-06-30 12:26 - 00000000 ____D C:\Users\Lucas\Desktop\Fassadenplatten Baukonstruktion
2015-06-28 18:58 - 2015-07-06 18:38 - 00003450 _____ C:\Windows\System32\Tasks\Vroifhit
2015-06-28 18:53 - 2015-06-28 18:53 - 00000000 _____ C:\places.sqlite
2015-06-28 12:59 - 2015-06-28 12:59 - 00003174 _____ C:\Windows\System32\Tasks\tet3008
2015-06-27 11:00 - 2015-07-07 21:00 - 00000000 ____D C:\AdwCleaner
2015-06-26 18:11 - 2015-06-27 10:37 - 00003458 _____ C:\Windows\System32\Tasks\Evoemdreexse
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\ProgramData\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files\WIBU-SYSTEMS
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files\CodeMeter
2015-06-25 13:41 - 2015-06-25 13:41 - 00000000 ____D C:\Program Files (x86)\CodeMeter
2015-06-25 12:31 - 2015-06-25 13:42 - 00029272 _____ C:\Users\Lucas\Documents\Zeichnung1_recover.dwg
2015-06-24 13:08 - 2015-06-24 13:08 - 00000121 _____ C:\Users\Lucas\Documents\acad.err
2015-06-24 08:09 - 2015-07-14 22:09 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D593D5C0-2D8A-47BE-8828-5D8F7DF4B61A}
2015-06-22 18:07 - 2015-06-22 18:07 - 00437248 _____ C:\Users\Lucas\Desktop\Berechnungen Bauantrag.xls
2015-06-22 12:23 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-06-15 11:09 - 2015-06-15 11:09 - 00003152 _____ C:\Windows\System32\Tasks\{6BE45D62-7EF8-492B-BFFF-27C44B3233FC}

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-15 17:04 - 2014-10-14 15:01 - 01087385 _____ C:\Windows\WindowsUpdate.log
2015-07-15 17:01 - 2015-05-26 00:32 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-07-15 17:01 - 2014-10-31 18:06 - 00000000 ____D C:\ProgramData\Kodak
2015-07-15 17:01 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.log
2015-07-15 17:01 - 2014-03-18 21:50 - 00000000 ____D C:\ProgramData\PDFC
2015-07-15 17:01 - 2013-11-01 16:08 - 00001018 _____ C:\Windows\SysWOW64\bscs.ini
2015-07-15 17:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-15 17:00 - 2009-07-14 06:51 - 00090818 _____ C:\Windows\setupact.log
2015-07-15 16:59 - 2009-07-14 06:45 - 00037408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-15 16:59 - 2009-07-14 06:45 - 00037408 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-15 16:59 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-07-15 16:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2015-07-15 16:53 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.001
2015-07-15 16:53 - 2010-11-21 05:47 - 00764766 _____ C:\Windows\PFRO.log
2015-07-15 02:32 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.002
2015-07-15 01:43 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.003
2015-07-15 01:30 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.004
2015-07-15 01:24 - 2014-05-23 09:50 - 00000225 _____ C:\Windows\CryptoMill_CreoService.005
2015-07-15 00:06 - 2015-01-29 11:15 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLucas
2015-07-15 00:06 - 2015-01-29 11:15 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForLucas.job
2015-07-14 22:44 - 2009-07-14 06:45 - 00367616 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-14 22:42 - 2014-12-13 17:22 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-14 22:42 - 2014-10-20 13:46 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-14 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-14 22:34 - 2014-10-25 11:29 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 02:08 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-13 08:36 - 2014-10-29 22:47 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2015-07-09 13:41 - 2014-10-14 21:07 - 00000000 ____D C:\Users\Lucas\AppData\Local\Akamai
2015-07-08 02:47 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\addins
2015-07-07 22:54 - 2014-12-08 13:12 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2EA83ECB-45D2-4CF8-80F6-39926218F11E}
2015-07-07 22:53 - 2014-05-23 09:50 - 00700380 _____ C:\Windows\system32\perfh007.dat
2015-07-07 22:53 - 2014-05-23 09:50 - 00149986 _____ C:\Windows\system32\perfc007.dat
2015-07-07 22:53 - 2009-07-14 07:13 - 01622706 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-07 22:47 - 2014-12-08 13:12 - 00096040 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-07 22:47 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-07-07 21:00 - 2014-10-14 15:05 - 00000984 _____ C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-07 21:00 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2015-07-07 20:53 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages
2015-07-07 20:50 - 2014-10-14 15:04 - 00000000 ____D C:\Users\Lucas
2015-07-07 20:48 - 2015-05-26 00:43 - 00000000 ____D C:\Program Files (x86)\News Factory
2015-07-07 20:10 - 2015-05-20 10:46 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-07-05 12:08 - 2010-11-21 05:27 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-07-03 08:43 - 2014-10-25 11:29 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-29 11:36 - 2015-05-25 23:45 - 00001478 _____ C:\Users\Lucas\Documents\plot.log
2015-06-29 09:58 - 2014-10-14 15:06 - 00000000 ____D C:\Users\Lucas\AppData\Local\PDFC
2015-06-28 17:32 - 2009-07-14 04:34 - 00000505 _____ C:\Windows\win.ini
2015-06-26 19:28 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-25 13:43 - 2015-05-29 09:34 - 00000000 ____D C:\Users\Lucas\AppData\Roaming\kubit
2015-06-25 13:42 - 2014-05-23 09:14 - 00054710 _____ C:\Windows\DPINST.LOG
2015-06-25 13:03 - 2015-05-29 09:45 - 00000000 ____D C:\Windows\system32\appmgmt
2015-06-22 17:54 - 2015-05-30 11:56 - 00000000 ____D C:\Users\Lucas\Desktop\Daten
2015-06-15 11:28 - 2015-06-01 10:12 - 00000045 _____ C:\user.js

==================== Files in the root of some directories =======

2015-06-30 13:05 - 2015-06-30 13:05 - 0000400 _____ () C:\Users\Lucas\AppData\Local\CilJT.vbs
2014-10-31 19:21 - 2014-10-31 19:21 - 0000236 _____ () C:\Users\Lucas\AppData\Local\LaunchHomeCenter.log
2015-06-02 14:00 - 2015-06-02 14:00 - 0000000 _____ () C:\Users\Lucas\AppData\Local\Temp.dat
2015-07-15 17:01 - 2015-07-15 17:01 - 0000004 ____H () C:\ProgramData\cm-lock
2014-10-15 20:56 - 2014-10-15 20:56 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-23 09:38

==================== End of log ============================
         
--- --- ---


[CODE]Additional
FRST Logfile:
Code:
ATTFilter
scan result of Farbar Recovery Scan Tool (x64) Version:13-07-2015
Ran by Lucas at 2015-07-15 17:07:14
Running from C:\Users\Lucas\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2790422825-2525740105-2010072699-500 - Administrator - Enabled) => C:\Users\Administrator
Gast (S-1-5-21-2790422825-2525740105-2010072699-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2790422825-2525740105-2010072699-1003 - Limited - Enabled)
Lucas (S-1-5-21-2790422825-2525740105-2010072699-1002 - Administrator - Enabled) => C:\Users\Lucas

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

aioscnnr (x32 Version: 7.6.13.10 - Your Company Name) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{C4CB2534-82F4-F4AF-5767-9EE64EF9EB64}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AutoCAD 2015 - Deutsch (German) (Version: 20.0.210.0 - Autodesk) Hidden
AutoCAD 2015 - Deutsch (German) (Version: 20.0.51.0 - Autodesk) Hidden
AutoCAD 2015 Language Pack - Deutsch (German) (Version: 20.0.51.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.2.3.1000 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk AutoCAD 2015 - Deutsch (German) (HKLM\...\AutoCAD 2015 - Deutsch (German)) (Version: 20.0.51.0 - Autodesk)
Autodesk AutoCAD 2015 - Deutsch (German) SP2 (HKLM\...\AutoCAD 2015 - Deutsch (German) SP2) (Version: 20.0.210.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{B0E4871A-09A2-49C3-9A9E-D6409B37FD3A}) (Version: 4.36.2452 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.1.39 - Autodesk)
Autodesk ReCap (Version: 1.3.1.39 - Autodesk) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
C4USelfUpdater (x32 Version: 1.00.0000 - Your Company Name) Hidden
center (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
CodeMeter Runtime Kit v5.21 (HKLM\...\{05CA69B3-6699-425F-8223-39E4E00B6581}) (Version: 5.21.1478.500 - WIBU-SYSTEMS AG)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3115 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.2.1.4224 - CyberLink Corp.)
DocToPDFConverter (HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\...\DocToPDFConverter) (Version: 01.00.00.00 - VolatoTech)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
essentials (x32 Version: 7.8.0.0 - Eastman Kodak Company) Hidden
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.2 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{84663FDA-1374-4048-9869-DD4A8784785A}) (Version: 6.0.16.1 - Hewlett-Packard Company)
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 8.2.0.1663 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{7ED7BF91-D145-480A-B206-6891576F6935}) (Version: 4.6.12.1 - Hewlett-Packard Company)
HP Device Access Manager (HKLM\...\{9F7FF800-8C11-4741-8D20-92E43CA02FD6}) (Version: 8.2.0.10 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{7940DAB9-AC72-4422-8908-DCF58C2C1D21}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Drive Encryption (HKLM\...\HPDriveEncryption) (Version: 8.6.11.10 - Hewlett-Packard Company)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{240B2BF7-E7E6-425C-A2A4-A3149189BF7F}) (Version: 2.3.1 - Hewlett-Packard Company)
HP File Sanitizer (HKLM-x32\...\{547607B0-3294-4ECA-8F5E-921404676CBB}) (Version: 8.4.11.1 - Hewlett-Packard Company)
HP HD Webcam Driver (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.8.30 - SunplusIT)
HP Hotkey Support (HKLM-x32\...\{C807BEFB-0F17-41AC-B307-D7B5E1553040}) (Version: 5.0.20.1 - Hewlett-Packard Company)
HP PageLift (HKLM-x32\...\{708ABF62-5D7A-4550-823A-1F9EFA63645A}) (Version: 1.0.11.1 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{5C2D96B7-0468-4450-8BD9-63AB796D72CF}) (Version: 3.4.11.0 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{7EF08127-4C30-4C05-8CEB-544F8A71C080}) (Version: 8.7.1.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{A3B64280-DE4C-40F0-86BB-CCB2A6056BA2}) (Version: 7.3.32.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 13.00.0000 - Hewlett-Packard)
HP System Default Settings (HKLM-x32\...\{3A61A282-4F08-4D43-920C-DC30ECE528E8}) (Version: 2.6.1 - Hewlett-Packard Company)
HP Theft Recovery (HKLM-x32\...\InstallShield_{BAC712C6-4061-4C9F-AB58-A5C53E76704A}) (Version: 8.2.0.9 - Hewlett-Packard Company)
HP Trust Circles (HKLM-x32\...\HP Trust Circles) (Version: 8.2.15.16418 - CryptoMill Technologies)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6486.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3993 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1337.1) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0366 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.7.3.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{201B03D6-FDDA-4C70-8A15-887F5B3CE365}) (Version: 4.2.19.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e63d3cb3-0b4d-44ca-aba0-ba433f2f37fd}) (Version: 17.13.0 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kodak AIO Printer (Version: 7.8.1.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.8.5.2 - Eastman Kodak Company)
kubit Box 2015 - PhoToPlan Pro Deutsch für AutoCAD (LT) 2015 64-bit (HKLM-x32\...\kubitBox_2015_DE_AC2015_is1) (Version: 15.0.14.13228 - kubit GmbH, Germany)
kubit Box version manager (HKLM-x32\...\kubitBox_version_manager_is1) (Version: 15.0.14.13228 - kubit GmbH, Germany)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
OEM Application Profile (HKLM-x32\...\{CCBD6679-C7CF-2030-2A1F-3640781DF4F4}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
PDF Complete Corporate Edition (HKLM-x32\...\PDF Complete) (Version: 4.1.50 - PDF Complete, Inc)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.5.0 - Prolific Technology INC)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Ralink Bluetooth Stack (HKLM\...\{BCDD86BE-1426-19BA-D1D1-C94D92FD6281}) (Version: 11.0.748.0 - Mediatek)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.1.9200.18 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.73.618.2013 - Realtek)
Sentinel Runtime (HKLM-x32\...\{678E25DE-EB70-4B01-9BAB-649F613A8434}) (Version: 6.63.1.43776 - SafeNet Inc.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Validity Fingerprint Sensor Driver (HKLM\...\{F5850B80-27F9-406E-91D3-1329F813BA63}) (Version: 4.5.130.0 - Validity Sensors, Inc.)
Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2790422825-2525740105-2010072699-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\de-DE\acadficn.dll (Autodesk, Inc.)

==================== Restore Points =========================

27-06-2015 10:49:56 LuxuryCasino wird entfernt
29-06-2015 21:42:24 Windows Update
02-07-2015 14:21:59 Removed SketchUp-Import.
02-07-2015 22:39:15 Windows Update
06-07-2015 18:44:56 Windows Update
13-07-2015 08:39:22 Windows Update
14-07-2015 22:30:29 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02C49FCB-27F0-45F4-BC7A-A583D99363DA} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {176D0F84-3664-4CAC-9771-7B84432AD161} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-09] (Hewlett-Packard Company)
Task: {416373CD-3D9F-41FE-AE65-29CDA7FBA0E9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-07] (Google Inc.)
Task: {4EA02EBE-7251-40F9-86BC-E83D7CF55CF6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {5732EE0A-F5DF-4DD2-A76B-B5D973F1466A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-09] (Hewlett-Packard Company)
Task: {5910D080-AB2B-4D31-93E5-ADB626C4AF40} - System32\Tasks\HPCeeScheduleForLucas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {6F66536E-160C-44D6-AFCB-5B1943133EA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-07] (Google Inc.)
Task: {95FDDBBC-6076-46B7-B551-AFED27391CC8} - System32\Tasks\{6BE45D62-7EF8-492B-BFFF-27C44B3233FC} => pcalua.exe -a C:\Users\Lucas\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cmi
Task: {BC2252B5-B587-48D6-BB8E-27A51818B1B2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] ()
Task: {C5E6F396-DA0C-4515-92D3-E89DEA5E894F} - System32\Tasks\Vroifhit => C:\ProgramData\Vroifhit\1.0.1.0\irpnaxna.exe
Task: {EEEDF8D0-FA2C-4911-9B2A-ED0CA1F77305} - System32\Tasks\tet3008 => C:\Program
Task: {F29679C7-C075-4C03-A64D-09B1383A728E} - System32\Tasks\Evoemdreexse => C:\ProgramData\Evoemdreexse\1.0.1.0\gawrufia.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLucas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (Whitelisted) ==============

2013-05-22 22:21 - 2013-05-22 22:21 - 00299832 _____ () C:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00029432 _____ () C:\Windows\system32\BsTrace.dll
2013-08-08 00:02 - 2013-08-08 00:02 - 00007168 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Theft Recovery\CtService.exe
2013-11-01 16:48 - 2013-11-01 16:48 - 00016632 _____ () C:\Windows\system32\BsHelpCSps.dll
2014-02-28 12:32 - 2014-02-28 12:32 - 00174368 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
2014-10-15 21:06 - 2014-12-05 04:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2014-10-15 21:06 - 2014-12-05 04:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2014-10-11 14:06 - 2014-10-11 14:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 14:05 - 2014-10-11 14:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00080120 _____ () C:\Windows\system32\BsProfilefunc.dll
2013-11-01 16:48 - 2013-11-01 16:48 - 00371448 _____ () C:\Windows\system32\BsExtendFunc.dll
2013-11-01 16:46 - 2013-11-01 16:46 - 00026360 _____ () C:\Windows\SysWOW64\BsTrace.dll
2015-07-14 22:33 - 2015-07-13 23:55 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libglesv2.dll
2015-07-14 22:33 - 2015-07-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libegl.dll
2013-06-05 20:35 - 2013-06-05 20:35 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2014-12-11 13:05 - 2014-12-11 13:04 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Lucas\Downloads\kubitBox_PhoToPlan-Pro_15.0.13.11782_setup.exe:BDU

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2790422825-2525740105-2010072699-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Stale Mix => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodeMeter Control Center.lnk => C:\Windows\pss\CodeMeter Control Center.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Lucas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Download.lnk => C:\Windows\pss\Download.lnk.Startup
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Lucas\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: Conime => %windir%\system32\conime.exe
MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{A1D60A40-05C0-4C86-AF1F-D4DA3FD51773}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8CA4529A-95DB-4FCC-B067-3C2C50812EAE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{93D8B6AC-CF49-47C8-8005-B5AFF56D5E21}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DABCFFD3-8D45-417D-BA14-C69AA52194BF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D5CEC9CA-F808-4AE0-AE25-77FBFE0B8886}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B501E2D1-BFFE-4441-A2D5-0FC0CD168706}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{1C85D374-59C1-468A-9018-9745D7DC5093}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{8F953712-E433-49DF-A002-A7D376666C04}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{E27FB7D7-5D2D-4972-ADB8-A44C95E26CF7}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{4BE97F83-9D3F-4887-ACE6-34AE3E1563EA}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{73153180-78AF-42E7-8D05-646A2C56EADC}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{45D9AF8C-9A52-4BAA-8376-CDBE399CE0A1}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [TCP Query User{13BB74D3-8622-4721-8081-8DB59758D2E6}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{EB7E3CB3-19BF-4C5F-9CC4-421DBB9AE30C}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{D00B7FD5-A627-4B26-AD1C-D62B27AB678F}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{57221968-5EE3-42EA-B07D-EA46287A9873}C:\users\lucas\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\lucas\appdata\local\akamai\netsession_win.exe
FirewallRules: [{05E17465-AEF7-498E-9F7D-CE74E34BAE7C}] => (Allow) LPort=50248
FirewallRules: [{D11437EB-8660-49A3-B67A-3C3277FBD4FC}] => (Allow) LPort=9322
FirewallRules: [{1BA7CC1E-A17F-49C2-ABF2-4E05D85223CE}] => (Allow) LPort=5353
FirewallRules: [{57239587-E810-4DB8-834C-3D27C837E283}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{537424BB-BC6F-4C55-B44B-AA20A6262653}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{ACF4103F-AB52-44FF-9C85-D5D2F779230F}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{494908CC-36F8-43FE-9357-84C1AFFEB07A}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{DCA08705-B65E-4EFD-ABB3-46B84993610B}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{881F2FBD-55FF-4CEF-AB32-6291C0E36F3C}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{8B8E7CEC-B865-4F23-BEA1-B2F8F059920D}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{0AAC8912-7341-4CE6-9D21-11B23950AE02}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{2955AF9E-D6E7-4CEC-B461-1363520B78F5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{07C30D84-7679-4C48-8267-7D23B6B4DCE5}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{7E0026E3-F8B5-44F8-8A05-E401A687866D}] => (Allow) LPort=9322
FirewallRules: [{FB351028-8D36-44CB-A864-B4AB8D787A24}] => (Allow) LPort=5353
FirewallRules: [{B391B01C-A4F0-4EAC-A9A3-FE98A2177DA2}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{F1760CA4-B264-4C33-BB7E-DF84F53F6C96}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{FDF86C20-8BEE-49D5-9AE6-097F1EEC0C01}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{6185CA28-156A-4733-964F-39087EA25F87}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{E13DD6DB-DFB8-41B1-B321-A4A59EAD6D45}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{D3FB534A-C803-478C-9713-5432B270CB96}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{639FB50C-153F-4503-9882-79ABEBE95D22}] => (Allow) C:\Windows\system32\hasplms.exe
FirewallRules: [{9C0E9C43-A297-4808-A067-160060270005}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{F30B81AB-9AEB-4FFA-8337-74BDFA4D1D9A}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
FirewallRules: [{FFD32437-24D0-4873-8899-A9B6C9418BF8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Bluetooth Server
Description: Bluetooth Server
Class Guid: {34446e8e-37b4-4b16-9da6-bea2db33465a}
Manufacturer: Intel Corporation
Service: btmaux
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/15/2015 05:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 05:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 05:00:40 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 04:54:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 04:54:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 04:53:30 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 02:32:11 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (07/15/2015 02:07:58 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.


System errors:
=============
Error: (07/15/2015 05:03:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 04:56:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 02:35:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:46:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:33:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:26:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:18:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 01:15:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Update" wurde mit folgendem Fehler beendet: 
%%-2147467243

Error: (07/15/2015 01:14:54 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/15/2015 12:31:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) ME Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office:
=========================
Error: (07/15/2015 05:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 05:01:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 05:00:40 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 04:54:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 04:54:09 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.

Error: (07/15/2015 04:53:30 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 02:32:11 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: 

Error: (07/15/2015 02:07:58 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   16 33.178.168.192.in-addr.arpa. PTR Lucas-HP.local.

Error: (07/15/2015 01:44:08 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.33:5353   18 33.178.168.192.in-addr.arpa. PTR Lucas-HP-2.local.


CodeIntegrity Errors:
===================================
  Date: 2015-06-29 21:44:47.261
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.279
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.246
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-29 21:41:23.215
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz
Percentage of memory in use: 32%
Total physical RAM: 8073.11 MB
Available physical RAM: 5434.58 MB
Total Virtual: 16144.43 MB
Available Virtual: 13218.17 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:682.75 GB) (Free:603.49 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:12.88 GB) (Free:1.41 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.96 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 206BA7A1)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=682.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0B)

==================== End of log ============================
         
--- --- ---

Irgendwie kommt mir das etwas extrem vor, dass über 110 Prozesse hier am laufen sind. Aber auch wenn ich mir alle Prozesse genau anschaue kann ich keinen finden, der jetzt nicht geladen werden müsste. Liegt wohl eher daran, dass ich nicht wirklich weiß ab wann Funktionen dieses Laptops aufhören zu funktionieren.
Das einzige was auffällt ist halt, dass super viele "Utility"-Prozesse von HP, Intel und anderen Laptopfunktionen am Laufen sind, die ich nur ungern deaktivieren möchte. Ob die jetzt der Grund für den für mich sich langsam anfühlenden Computerboot sind wage ich zu bezweifeln, da bei einem Cleanboot nicht wirklich eine großartige Änderung zu vermerken war.
__________________
Beste Grüße,

Kuhlambo12

Geändert von kuhlambo12 (15.07.2015 um 16:33 Uhr)

Alt 16.07.2015, 07:45   #28
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Das sind schon viele, muss aber größtenteils. Aber wenn der Cleanboot keine Abhilfe bringt ist das Thema mit den "Fremdprozessen" eh durch. Dann liegt es an Windows selbst oder der Hardware.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.07.2015, 08:33   #29
kuhlambo12
 
Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



Die Hardware würde ich ausschließen, der Laptop ist laut Besitzer noch kein Jahr alt und sobald man denn auf dem Desktop ist läuft der auch sehr gut.

Würde es Sinn machen einmal das Windows-Repair All-in-One rüberzujagen?
Oder ist das für solche Zwecke eher weniger zu gebrauchen.
__________________
Beste Grüße,

Kuhlambo12

Alt 16.07.2015, 10:09   #30
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Standard

Windows 8 & Windows 7 Laptop beide stark Adware verseucht



klar, versuchen kann man es auf jeden Fall
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Windows 8 & Windows 7 Laptop beide stark Adware verseucht
crossbrowser, pup.optional.3dbubblesound.a, pup.optional.crossbrowse.a, pup.optional.crossbrowse.c, pup.optional.crossrider.a, pup.optional.defaultsearch.a, pup.optional.dynconie.a, pup.optional.globalupdate.a, pup.optional.hqcinemax.a, pup.optional.iminent.a, pup.optional.lolliscan.a, pup.optional.luckytab.a, pup.optional.maintainersvc.a, pup.optional.mixvideoplayer.a, pup.optional.modgoog, pup.optional.multiplug.a, pup.optional.optimizerpro, pup.optional.optimizerpro.a, pup.optional.perfectcoupon.a, pup.optional.picexa.a, pup.optional.trovi.a, pup.optional.tuto4pc.a, pup.optional.websteroids.a, pup.optional.windowsmangerprotect.a, pup.optional.xtab.a, pup.optionlal.crossrider, super




Ähnliche Themen: Windows 8 & Windows 7 Laptop beide stark Adware verseucht


  1. Windows 8/10: Hartnäckige russische Adware, die auch trotz Neuinstallation von Windows nicht verschwindet
    Log-Analyse und Auswertung - 27.10.2015 (6)
  2. Windows 7 64bit stark ausgebremst, Programmabstürze
    Plagegeister aller Art und deren Bekämpfung - 13.10.2015 (21)
  3. Windows 8.1 - Browser immer langsamer - Disconnects und stark schwankende Internetgeschwindigkeit
    Log-Analyse und Auswertung - 05.08.2015 (6)
  4. Leistung vom Laptop stark vermindert
    Plagegeister aller Art und deren Bekämpfung - 12.04.2015 (23)
  5. Windows 8.1 - Computer stark verlangsamt - Verdacht auf Virus
    Plagegeister aller Art und deren Bekämpfung - 03.04.2015 (19)
  6. Windows 8.1: nach Update Adware/PUA Fund und Windows.old nicht gefunden
    Log-Analyse und Auswertung - 22.02.2015 (3)
  7. Windows 8.1:Variant.Adware.Graftor.159320+Adware.Generic.1133960-Virenbefall?
    Log-Analyse und Auswertung - 13.01.2015 (32)
  8. Windows 7: Rechner laggt sehr stark
    Log-Analyse und Auswertung - 05.12.2014 (15)
  9. Windows 7: ADWARE/CrossRider.Gen4, ADWARE/EoRezo.Gen4 und ADWARE/MPlug 6.14 durch AntiVir gefunden
    Log-Analyse und Auswertung - 22.10.2014 (4)
  10. eBay-Fake eMail mit ZIP Anhang gespeichert, Windows 7- Avira: Enthält Erkennungsmuster der Adware ADWARE/Adware.Gen
    Log-Analyse und Auswertung - 29.08.2014 (17)
  11. Laptop - Spy-Adware - Toolbars verseucht
    Plagegeister aller Art und deren Bekämpfung - 16.08.2014 (3)
  12. Windows XP: PC reagiert stark verzögert und ist extremst langsam
    Log-Analyse und Auswertung - 10.08.2014 (22)
  13. Wie stark infiziert ist der Laptop?
    Log-Analyse und Auswertung - 25.04.2014 (9)
  14. Windows 7: Windows-Sicherheitscenter und Windows Defender funktionieren nicht mehr, Services.exe verseucht?
    Log-Analyse und Auswertung - 07.01.2014 (8)
  15. Virusverdacht, will den Laptop platt machenVista>Windows 7) aber weiß nicht ob die ext. Festplatte verseucht ist
    Plagegeister aller Art und deren Bekämpfung - 07.09.2013 (31)
  16. Laptop mit Windows 7 von B1.org-Adware säubern
    Log-Analyse und Auswertung - 20.05.2013 (7)
  17. Windows und Programme stark zeitverzögert
    Log-Analyse und Auswertung - 22.04.2013 (35)

Zum Thema Windows 8 & Windows 7 Laptop beide stark Adware verseucht - Mach gleich den nächsten. Ich würde dann einfach auf Win10 warten - Windows 8 & Windows 7 Laptop beide stark Adware verseucht...
Archiv
Du betrachtest: Windows 8 & Windows 7 Laptop beide stark Adware verseucht auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.