| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
12.08.2015, 11:51
| #1 |
| |  Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Hallo, ich habe seit einiger Zeit das Problem, dass willkürlich Wörter die in einem Text im Internet (ich benutze Firefox als Browser) vorkommen zu Links werden. Diese sind dann blau unterstrichen und haben einen grünen Pfeil. Es poppen auch immer wieder Werbewebsites auf, obwohl ich Adblock Plus aktiviert habe. Beide Probleme haben zur gleichen Zeit angefangen und seitdem geht mein Browser auch nicht mehr so schnell. Mein Betriebssystem ist Windows 8.1. Ich freue mich auf Hilfe und möchte mich schon einmal im Voraus bedanken!  LG sunrise_77 |
|
12.08.2015, 12:05
| #2 |
| /// the machine /// TB-Ausbilder    |  Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
12.08.2015, 12:05
| #3 |
| /// the machine /// TB-Ausbilder | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) .
__________________ |
|
12.08.2015, 12:10
| #4 | |
| /// TB-Ausbilder | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen)Zitat:
 |
|
12.08.2015, 12:54
| #5 |
| | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Danke für die schnelle Antwort  Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:11-08-2015 02
durchgeführt von Selina (Administrator) auf SUNRISE (12-08-2015 13:40:04)
Gestartet von C:\Users\Selina\Downloads
Geladene Profile: Selina & Anja (Verfügbare Profile: Selina & Anja)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Windows SysTool) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe
(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe
(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(SPAMfighter ApS) C:\Program Files (x86)\Fighters\FighterSuiteService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(hxxp://www.aobo-porn-filter.com) C:\Windows\SysWOW64\drivers\sysfilter\sysfilter.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(McAfee, Inc.) C:\Program Files\mcafee\vul\McVulCtr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [110144 2013-03-06] (CyberLink)
HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet)
HKLM-x32\...\Run: [CommonToolkitTray] => C:\Program Files (x86)\Fighters\Tray\FightersTray.exe [1696288 2014-10-10] (SPAMfighter ApS)
HKLM-x32\...\Run: [SWPROguard] => C:\Program Files (x86)\Fighters\SPYWAREfighter\swprotray.exe
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3175312 2015-08-06] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [AoboAutoRun32] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock.dll",OK
HKLM\...\Policies\Explorer\Run: [AoboAutoRun64] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock64.dll",OK
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Power2GoExpress] => C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe [2649664 2014-01-15] (CyberLink Corp.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [BingSvc] => C:\Users\Selina\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Power2GoExpress] => C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe [2649664 2014-01-15] (CyberLink Corp.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.16\OptProLauncher.exe
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2015-03-05]
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe 2.1 PRO Full Crack.lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe 2.1 PRO Full Crack.lnk -> C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}\Sparkol VideoScribe 2.1 PRO Full Crack.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe Professional 2.1.0 Full(1).lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe Professional 2.1.0 Full(1).lnk -> C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}\Sparkol VideoScribe Professional 2.1.0 Full(1).exe (Keine Datei)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.delta%2Dhomes.com%2F%3Ftype%3Dhp%26ts%3D1431679656%26z%3D4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z%26from%3Dwpm05153%26uid%3DST1000LM024XHN%2DM101MBB%5FS32XJ9DF708772&OSP=http%3A%2F%2Fdo%2Dsearch.com%2Fweb%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3D%26utm%5Fcampaign%3Dinstall%5Fie%26utm%5Fcontent%3Dds%26from%3D%26uid%3DST500DM002%2D1BC142%5FW2A27G6AXXXXW2A27G6A%26ts%3D1420373293%26type%3Ddefault%26q%3D%7BsearchTerms%7D
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fasus13.msn.com%2F%3Fpc%3DASJB&OSP=
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1005 -> {27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF} URL = hxxp://rts.dsrlte.com/?affID=na&q={searchTerms}&r=835
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1005 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2923131921-1963989444-91532992-1005 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={8573D089-44C2-4049-8061-B257EBA8639E}&mid=29af043fca0147cda13e85e9164ab315-bb32dc00a59fbaf3ddd9f6aa4ef7d70985822c06&lang=de&ds=AVG&coid=avgtbavg&cmpid=0215pit&pr=fr&d=2015-03-29 21:38:44&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: SalePlus -> {0d5b8aad-5e9d-46bd-a6a9-b98c883b23f4} -> C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.x64.dll Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: bestadblocker -> {8ffb2166-b719-4f1e-b522-b691255401c4} -> C:\Program Files (x86)\bestadblocker\PYMYWRFbYh7Fwk.x64.dll Keine Datei
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll [2015-08-06] (AVG)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: SalePlus -> {ba254a32-0efe-4ce1-9c79-f2ba7a1490f7} -> C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.x64.dll Keine Datei
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-04-15] (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO-x32: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-05-20] (Thinknice Co. Limited)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll [2015-08-06] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-04-15] (DVDVideoSoft Ltd.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-09-04] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-09-04] (McAfee, Inc.)
Winsock: Catalog9 08 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter32.dll [607744 2015-03-14] ()
Winsock: Catalog9 10 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter32.dll [607744 2015-03-14] ()
Winsock: Catalog9-x64 08 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll [998400 2015-03-14] ()
Winsock: Catalog9-x64 10 C:\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll [998400 2015-03-14] ()
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{03D1BF89-D118-4E4F-812A-97EEF06B483E}: [DhcpNameServer] 192.168.8.1 192.168.8.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
FireFox:
========
FF ProfilePath: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: delta-homes
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: delta-homes
FF Homepage: google.at
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [Keine Datei]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-20] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2014-12-28] ()
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\avg-secure-search.xml [2015-08-11]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\delta-homes.xml [2015-08-12]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\dsrlte.xml [2015-03-10]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-images.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-maps.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\search-simple.xml [2015-03-19]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-08-06]
FF Extension: SAlePlUS - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\2u@EgTVxea.net [2015-04-15]
FF Extension: AVG Web TuneUp - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\avg@toolbar [2015-03-29]
FF Extension: Bing Search - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\bingsearch.full@microsoft.com [2015-05-14]
FF Extension: Default NewTab - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\default_newtabff@gmail.com [2015-07-25]
FF Extension: SalePLius - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\J@C9jg.com [2015-04-15]
FF Extension: QueieenCouupOn - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\JQzw@H.com [2015-03-19]
FF Extension: SaleePlous - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\LFE@Ba.edu [2015-04-15]
FF Extension: bestadblocker - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\r@L.co.uk [2015-04-15]
FF Extension: SSalePlUUs - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\Yl6lAIg@1.com [2015-04-15]
FF Extension: bestadblocker - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\Yvj@q.net [2015-04-15]
FF Extension: Cliqz - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\cliqz@cliqz.com.xpi [2015-07-25]
FF Extension: Default SearchProtected - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\defsearchp@gmail.com.xpi [2015-07-25]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-05-02]
FF Extension: Adblock Plus - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\quick_searchff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\sweetsearch@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-31]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: Kein Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\cliqz@cliqz.com
Chrome:
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR HomePage: Default -> hxxp://www.delta-homes.com/?type=hp&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
CHR StartupUrls: Default -> "hxxp://www.delta-homes.com/?type=hp&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772"
CHR DefaultSearchKeyword: Default -> delta-homes
CHR DefaultSearchURL: Default -> hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
CHR Profile: C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-05]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-05]
CHR Extension: (YouTube) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-05]
CHR Extension: (One Last Pass Password Manager ) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo [2015-02-17]
CHR Extension: (Google Search) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-05]
CHR Extension: (Mozilla Gecko Tab) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm [2015-03-19]
CHR Extension: (World weather online) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk [2015-04-15]
CHR Extension: (Faster Light) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh [2015-02-07]
CHR Extension: (Mavenlink Project Manager) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami [2015-02-17]
CHR Extension: (Google Wallet) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-05]
CHR Extension: (Gmail) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-05]
CHR Extension: (SalePLius) - C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\ []
CHR Extension: (SaleePlous) - C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\ []
CHR Extension: (SAlePlUS) - C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\ []
CHR Extension: (SSalePlUUs) - C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\ []
CHR HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Datei ist nicht signiert]
R2 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2014-02-10] (Preventon Technologies Limited)
R2 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2014-02-10] (Preventon Technologies Limited)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2014-12-28] (WildTangent)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
R2 Suite Service; C:\Program Files (x86)\Fighters\FighterSuiteService.exe [1282592 2014-11-02] (SPAMfighter ApS)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2014-07-16] (TuneUp Software)
R2 vToolbarUpdater18.8.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe [1874320 2015-08-06] (AVG Secure Search)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [602112 2015-05-20] (Windows SysTool) [Datei ist nicht signiert] <==== ACHTUNG
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1195920 2015-08-06] ()
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-06] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
R3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2014-02-10] ()
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-12] (Realsil Semiconductor Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
U3 NPF; kein ImagePath
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-12 13:40 - 2015-08-12 13:41 - 00040263 _____ C:\Users\Selina\Downloads\FRST.txt
2015-08-12 11:31 - 2015-08-12 13:40 - 00000000 ____D C:\FRST
2015-08-12 11:30 - 2015-08-12 11:30 - 02172928 _____ (Farbar) C:\Users\Selina\Downloads\FRST64.exe
2015-08-11 14:57 - 2015-08-11 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-08-05 20:25 - 2015-08-06 21:44 - 00000000 ____D C:\Users\Selina\Desktop\Youtube channel
2015-08-05 19:47 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-05 19:47 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-05 19:47 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-05 19:47 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-14 21:55 - 2015-06-16 01:01 - 24894464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 21:55 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 21:55 - 2015-06-16 00:38 - 06024704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 21:55 - 2015-06-16 00:38 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 21:55 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-14 21:55 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 21:55 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 21:55 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-07-14 21:55 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-14 21:55 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 21:55 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-07-14 21:55 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 21:55 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-07-14 21:55 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-07-14 21:55 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 21:55 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 21:55 - 2015-06-15 23:32 - 19597824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-14 21:55 - 2015-06-15 23:32 - 14404608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 21:55 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-07-14 21:55 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 21:55 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-14 21:55 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-14 21:55 - 2015-06-15 23:09 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-14 21:55 - 2015-06-15 23:04 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 21:55 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-14 21:55 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-14 21:55 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-14 21:55 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-07-14 21:55 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-14 21:55 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-14 21:55 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-07-14 21:55 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-14 21:55 - 2015-06-15 22:37 - 04304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-14 21:55 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-07-14 21:55 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-07-14 21:55 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-14 21:55 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-14 21:55 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-14 21:55 - 2015-06-15 22:23 - 12830208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-14 21:55 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-07-14 21:55 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-14 21:55 - 2015-06-15 22:03 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-14 21:55 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-14 21:46 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 21:46 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-14 21:46 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2015-07-14 21:46 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\SysWOW64\locale.nls
2015-07-14 21:46 - 2015-04-28 15:13 - 00513480 _____ C:\Windows\system32\locale.nls
2015-07-14 21:45 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-14 21:45 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-14 21:45 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-07-14 21:45 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-07-14 21:45 - 2015-05-02 01:33 - 00410739 _____ C:\Windows\system32\ApnDatabase.xml
2015-07-14 21:45 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-07-14 21:45 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-07-14 21:43 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2015-07-14 21:43 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2015-07-14 21:09 - 2015-07-14 21:09 - 00012099 _____ C:\Users\Selina\Documents\Wochenplan_Smileys_Psy.xlsx
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-12 13:35 - 2015-06-10 19:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-12 13:24 - 2014-10-05 10:06 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-12 13:23 - 2014-07-31 19:27 - 01236160 _____ C:\Windows\WindowsUpdate.log
2015-08-12 13:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-12 12:00 - 2015-05-14 11:08 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-08-12 12:00 - 2015-05-14 11:08 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-08-12 11:43 - 2013-08-22 16:46 - 00096946 _____ C:\Windows\setupact.log
2015-08-12 11:34 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-12 11:08 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-12 09:39 - 2014-09-30 03:18 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923131921-1963989444-91532992-1001
2015-08-12 09:24 - 2014-09-30 02:27 - 00000000 ____D C:\Users\Selina\AppData\Local\Packages
2015-08-12 09:20 - 2014-09-30 03:49 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{924A399C-D8A5-42C9-8053-6DBF492001E4}
2015-08-11 14:58 - 2014-10-05 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-11 14:54 - 2014-09-30 03:13 - 00000000 ___DO C:\Users\Selina\OneDrive
2015-08-11 14:54 - 2014-09-30 02:28 - 00000074 _____ C:\Users\Selina\AppData\Roaming\sp_data.sys
2015-08-11 14:52 - 2014-10-05 10:06 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-11 14:52 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-08-11 14:51 - 2015-05-05 08:22 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-11 14:51 - 2014-07-31 19:50 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-08-11 14:51 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-11 14:51 - 2013-08-22 16:44 - 00485720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-11 14:50 - 2015-04-15 18:49 - 00000000 ____D C:\Program Files (x86)\SaleePlous
2015-08-11 14:50 - 2014-03-18 10:16 - 00036968 _____ C:\Windows\PFRO.log
2015-08-06 21:47 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-08-06 21:24 - 2015-03-29 21:38 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2015-08-06 21:24 - 2015-03-29 21:38 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2015-08-06 20:00 - 2015-04-15 18:27 - 00000000 ____D C:\Program Files (x86)\SalePlus
2015-08-06 19:41 - 2015-04-15 18:28 - 00000000 ____D C:\Program Files (x86)\bestadblocker
2015-08-06 14:20 - 2014-07-31 19:50 - 00000000 ____D C:\ProgramData\McAfee
2015-08-06 14:14 - 2015-05-18 22:08 - 00000000 ____D C:\Users\Selina\AppData\Local\CrashDumps
2015-08-05 21:10 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-08-05 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-08-05 20:02 - 2014-05-16 01:45 - 00773008 _____ C:\Windows\system32\perfh007.dat
2015-08-05 20:02 - 2014-05-16 01:45 - 00162310 _____ C:\Windows\system32\perfc007.dat
2015-08-05 20:02 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-26 15:51 - 2015-04-23 23:31 - 00000000 ____D C:\Users\Selina\Desktop\USB Stick
2015-07-26 11:37 - 2014-09-30 22:28 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-25 19:18 - 2015-06-17 08:02 - 00000000 ____D C:\Program Files\Common Files\AV
2015-07-25 19:16 - 2015-03-29 21:39 - 00000000 ____D C:\Users\Selina\AppData\Local\AVG Web TuneUp
2015-07-14 21:54 - 2014-10-20 18:24 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 21:49 - 2015-03-29 21:38 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2015-07-14 21:35 - 2015-06-10 19:03 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-13 23:10 - 2015-05-17 12:53 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:10 - 2015-05-17 12:53 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-02-05 16:01 - 2015-05-05 08:28 - 0000020 _____ () C:\Users\Selina\AppData\Roaming\appdataFr3.bin
2014-09-30 02:28 - 2015-08-11 14:54 - 0000074 _____ () C:\Users\Selina\AppData\Roaming\sp_data.sys
2015-03-18 19:08 - 2015-03-29 15:42 - 0000020 _____ () C:\Users\Selina\AppData\Local\appdataFr3.bin
2014-07-31 19:41 - 2014-07-31 19:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-03-14 14:02 - 2015-03-14 14:02 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-05-15 17:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 17:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-05-15 17:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
2014-10-05 10:49 - 2014-10-05 10:51 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-10-05 10:48 - 2014-10-05 10:49 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS
Einige Dateien in TEMP:
====================
C:\Users\Selina\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Selina\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Selina\AppData\Local\Temp\JMC_WM.exe
C:\Users\Selina\AppData\Local\Temp\oi_{B8811E58-D5AA-4DBA-9149-2F98DB59161D}.exe
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdrv7.dll
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdui7.dll
C:\Users\Selina\AppData\Local\Temp\regini.exe
C:\Users\Selina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Selina\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Selina\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_36PJN-VMKQD-9PCVW-VW84P-D67T3_act_1_.exe
C:\Users\Selina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Selina\AppData\Local\Temp\sqlite3.exe
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-05 20:40
==================== Ende von Ergebnis ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:11-08-2015 02
durchgeführt von Selina (2015-08-12 13:46:59)
Gestartet von C:\Users\Selina\Downloads
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2923131921-1963989444-91532992-500 - Administrator - Disabled)
Anja (S-1-5-21-2923131921-1963989444-91532992-1005 - Limited - Enabled) => C:\Users\Anja
Gast (S-1-5-21-2923131921-1963989444-91532992-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2923131921-1963989444-91532992-1003 - Limited - Enabled)
Selina (S-1-5-21-2923131921-1963989444-91532992-1001 - Administrator - Enabled) => C:\Users\Selina
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.9 - ASUS)
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.1.5.143 - AVG Technologies)
bestadblocker (HKLM-x32\...\{4820778D-AB0D-6D18-C316-52A6A0E1D507}) (Version: - ) <==== ACHTUNG
Camtasia Studio 8 (HKLM-x32\...\{A0FC961E-DC6D-4144-9277-ECDBB99D0AB9}) (Version: 8.5.1.1962 - TechSmith Corporation)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0.0.8517 - CyberLink Corp.)
DriverIdentifier 4.2.8 (HKLM-x32\...\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1) (Version: - DriverIdentifier)
Ethereal 0.99.0 (HKLM-x32\...\Ethereal) (Version: 0.99.0 - The Ethereal developer community, hxxp://www.ethereal.com)
EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ACHTUNG
Fighters (x32 Version: 4.5.146 - SPAMFIGHTER ApS) Hidden
Free YouTube to MP3 Converter version 3.12.59.415 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.415 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.28.01 - Hyperionics Technology LLC)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Jeyo Mobile Companion 2.1 (HKLM-x32\...\Jeyo Mobile Companion 2.1_is1) (Version: 2.1 - Jeyo, Inc.)
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1248 - McAfee, Inc.)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 332.85 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.85 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Open-Sankoré (HKLM-x32\...\{E63D17F8-D9DA-479D-B9B5-0D101A03703B}_is1) (Version: - Open-Sankore)
Opera Stable 30.0.1835.88 (HKLM-x32\...\Opera 30.0.1835.88) (Version: 30.0.1835.88 - Opera Software)
Picexa (HKLM-x32\...\Picexa) (Version: - Taiwan Shui Mu Chih Ching Technology Limited)
PixelPlanet PdfPrinter 7 (64bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.1.4 - Reimage) <==== ACHTUNG
SaleePlous (HKLM-x32\...\{B696F285-F54E-2524-58B1-E06A70ABE6BE}) (Version: - ) <==== ACHTUNG
SharkManCoupon (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - SharkManCoupon) <==== ACHTUNG
simplitec simplicheck (HKLM-x32\...\{DF103EDA-7937-4966-8EFB-5EF5C38301F2}) (Version: 1.3.9.0 - simplitec GmbH)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 2.2.81) (Version: 2.2.81 - Sparkol)
Sparkol VideoScribe (x32 Version: 2.2.81 - Sparkol) Hidden
SPYWAREfighter (HKLM-x32\...\SPYWAREfighter) (Version: 4.5.146 - SPAMFIGHTER ApS)
ToolSupport (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{1f7a5585}) (Version: - Software Publisher) <==== ACHTUNG
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.340 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
vi-view uninstall (HKLM-x32\...\vi-view uninstall) (Version: - vi-view) <==== ACHTUNG
Watchtower Library 2012 - Deutsch (HKLM-x32\...\{CFDF0961-77C7-4392-96EE-624DFE81C3C2}) (Version: 14.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.2 - WildTangent)
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
World weather online (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version: - ) <==== ACHTUNG
Yahoo! Search (HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Yahoo! Search) (Version: - Pay-By-Ads) <==== ACHTUNG
Yahoo! Search (HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\Yahoo! Search) (Version: - Pay-By-Ads) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> "C:\Windows\system32\igfxEM.exe" Keine Datei
==================== Wiederherstellungspunkte =========================
14-07-2015 21:41:41 Windows Update
05-08-2015 19:45:56 Windows Update
12-08-2015 09:39:32 Windows Update
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00A5A4E4-617E-4888-8DCB-4E87774F43CA} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {02554177-D27A-4093-8467-1296F3541CFE} - System32\Tasks\Yahoo! Search => C:\Users\Selina\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe <==== ACHTUNG
Task: {0E652D1A-7586-45A9-85F9-87FFD53E236D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-05] (Google Inc.)
Task: {1C092132-88FB-41DC-8364-824E30BFAD4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1D77BDEF-A383-44E5-A8D5-3CF4D8699796} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1E768371-E7A3-4DD8-B3A3-32588522E349} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [2015-03-16] (Reimage ltd.) <==== ACHTUNG
Task: {2761783C-2564-4D71-BD14-08A3EF337853} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {2E93A9E0-3BEC-496C-9434-8021BDF4962C} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {350480DB-4EAA-402F-B4C0-AD7A46E7689B} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-03-27] (ASUSTek Computer Inc.)
Task: {36661282-5128-41DB-B456-6949DCA00027} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - System32\Tasks\Yahoo! Search Updater => C:\Users\Selina\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe <==== ACHTUNG
Task: {4089616E-EDDD-4DA5-9E0D-DAB1EF6EA32D} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-01-14] (Reimage®) <==== ACHTUNG
Task: {4403BF88-01C8-46DC-83FD-E33097700E87} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {555E4B6D-40E1-43F1-B4F2-DC65CB4FC170} - System32\Tasks\{D4ED4DD4-E6F7-407F-8C09-B3EAACAFCBA5} => pcalua.exe -a C:\Users\Selina\AppData\Roaming\vi-view\UninstallManager.exe -c -ptid=cor
Task: {5E1D91C1-AC00-4421-867F-D6CAEAB30CA7} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2014-02-11] ()
Task: {70B6E66B-4FCC-4761-A0EC-52A2430F1657} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-05] (Google Inc.)
Task: {744CE80B-F1BF-4F2E-8B11-8BB8381A7604} - System32\Tasks\{86E86F40-51C2-4AB3-87B4-A0C0DF4F4D34} => pcalua.exe -a "C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\setup.exe" -c -uninstall
Task: {945D81A6-4C2B-4F64-BF0A-E2ECDCC9FA81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {B1E44976-AF85-4658-A49B-143F9E4BD2AB} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.)
Task: {B5071EA8-5F27-410E-8B09-1A83A624CE75} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS)
Task: {BEE2AECA-9FCF-4017-8090-72038D5B6DAF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {D66BAD24-C3F6-4B58-82EF-74086BA96BA0} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {DD929979-D7D4-4DA4-8CB3-B333EEB553B6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {EA858E9F-4743-42FC-BD69-BD3A731EEF91} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {FD4022ED-7434-4DD9-B0AF-4BEA35891F08} - System32\Tasks\Opera scheduled Autoupdate 1419616129 => C:\Program Files (x86)\Opera\launcher.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-03-29 21:38 - 2015-08-06 21:22 - 01195920 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2014-07-31 19:38 - 2014-03-13 21:26 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-30 22:28 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-16 11:24 - 2014-07-16 11:24 - 00699704 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-08-06 21:24 - 2015-08-06 21:22 - 00168336 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe
2015-07-04 12:47 - 2015-07-26 11:39 - 03992360 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\SAVI.DLL
2015-07-04 12:47 - 2015-07-26 11:40 - 00227624 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\OSDP.DLL
2015-07-04 12:47 - 2015-07-26 11:40 - 04986152 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\VEEX.DLL
2015-08-06 21:24 - 2015-08-06 21:23 - 00528272 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll
2013-10-08 21:41 - 2013-10-08 21:41 - 00037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2013-09-09 19:23 - 2013-09-09 19:23 - 00162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-07-31 19:33 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-04-27 10:24 - 2013-04-27 10:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll
2015-08-06 21:24 - 2015-08-06 21:22 - 01792400 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\avgtbr.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Selina\OneDrive:ms-properties
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Selina\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "DptfPolicyLpmServiceHelper"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "PixelPlanet PdfPrinter-Monitor"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "CommonToolkitTray"
HKLM\...\StartupApproved\Run32: => "SWPROguard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe 2.1 PRO Full Crack.lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe Professional 2.1.0 Full(1).lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Power2GoExpress"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Infigo"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "BingSvc"
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1005\...\StartupApproved\Run: => "Power2GoExpress"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{107B701F-D6F2-4125-989D-013EBE4114C2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4756372F-1DBA-4E0D-88D4-10D9CBE588DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{701A95DF-EB9C-41A2-9DB7-7FCB240568EE}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C24A835C-861A-49D8-A2CC-9053C11552DB}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{A34F36B9-4BB2-40D4-BEAC-72D3B6A7D7B8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{DA8C5E14-1AF3-4680-8A78-32EA772C239B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{32FC1979-2D76-4947-8C75-8ED839D364EB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{ACE879F9-CD19-4F10-827D-839AB752C818}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9DEDC08A-4AAD-4EFE-A264-D914813E7650}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{FDA1092F-154E-4FB1-B71A-84412016E944}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{DF970333-2791-4A78-B77A-7DFD953F58EA}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{650C856D-3797-48AE-B0EF-00F36AAF1043}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{1D872238-8039-4BF5-826A-5B4040368753}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{077BF549-8F4A-4C61-BE12-C4D9936F6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{69571B03-E475-4EAD-8620-E2BE564EB6AB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C6C0290D-DDE8-48B3-B84D-B3E8DC693DC3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{4DECD748-EF63-4CCC-BAC0-E39A79EEB77F}] => (Allow) LPort=8317
FirewallRules: [{00BE4382-D8C9-44D7-A3C3-A74A01E42A93}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{8842BE8D-197C-4EE5-9A67-8B063359D6D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{E26CC15F-1C7F-440C-9A34-6096EEF8893D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DEAC4C18-96F4-4E24-95F6-F605DA5C46FA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7015D2E8-D017-459F-BC17-45373052CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GWXUX.exe, Version: 6.3.9600.17813, Zeitstempel: 0x554a15f3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003d85e
ID des fehlerhaften Prozesses: 0x11f8
Startzeit der fehlerhaften Anwendung: 0xGWXUX.exe0
Pfad der fehlerhaften Anwendung: GWXUX.exe1
Pfad des fehlerhaften Moduls: GWXUX.exe2
Berichtskennung: GWXUX.exe3
Vollständiger Name des fehlerhaften Pakets: GWXUX.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: GWXUX.exe5
Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Name des fehlerhaften Moduls: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002bf58
ID des fehlerhaften Prozesses: 0x1184
Startzeit der fehlerhaften Anwendung: 0xScriptHelper.exe0
Pfad der fehlerhaften Anwendung: ScriptHelper.exe1
Pfad des fehlerhaften Moduls: ScriptHelper.exe2
Berichtskennung: ScriptHelper.exe3
Vollständiger Name des fehlerhaften Pakets: ScriptHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ScriptHelper.exe5
Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54dc4378
Name des fehlerhaften Moduls: alvupdt.dll, Version: 1.0.0.10, Zeitstempel: 0x5510b8fc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00016eb6
ID des fehlerhaften Prozesses: 0x34c
Startzeit der fehlerhaften Anwendung: 0xUpdateChecker.exe0
Pfad der fehlerhaften Anwendung: UpdateChecker.exe1
Pfad des fehlerhaften Moduls: UpdateChecker.exe2
Berichtskennung: UpdateChecker.exe3
Vollständiger Name des fehlerhaften Pakets: UpdateChecker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: UpdateChecker.exe5
Error: (07/25/2015 07:13:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm USBChargerPlus.exe, Version 3.1.9.4 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 32c
Startzeit: 01d0be67614cc6a9
Endzeit: 22
Anwendungspfad: C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
Berichts-ID: 6657e70b-32f0-11e5-829d-54a050ae5ae6
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (07/25/2015 07:12:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1c24
Startzeit: 01d0be88996b8bd9
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: ddc9673c-2a7b-11e5-829d-54a050ae5ae6
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (07/15/2015 12:58:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (07/14/2015 09:41:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (07/14/2015 09:18:31 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (07/04/2015 07:02:57 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Systemfehler:
=============
Error: (08/11/2015 03:41:40 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (08/11/2015 02:51:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TuneUpUtilitiesDrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (08/06/2015 08:42:31 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.43.220
registriert werden. Der Computer mit IP-Adresse 169.254.248.64 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (08/06/2015 08:42:15 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "SUNRISE :20" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.43.220
registriert werden. Der Computer mit IP-Adresse 169.254.248.64 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (08/06/2015 08:42:15 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{03D1BF89-D118-4E4F-812A-97EEF06B483E} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3065988)
Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3053863)
Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3029438)
Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3056347)
Error: (08/06/2015 08:33:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80246013 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB3018467)
Microsoft Office:
=========================
Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GWXUX.exe6.3.9600.17813554a15f3ntdll.dll6.3.9600.17736550f4336c0000005000000000003d85e11f801d0d041801d9aabC:\Windows\System32\GWX\GWXUX.exeC:\Windows\SYSTEM32\ntdll.dllbfd9159a-3c34-11e5-829e-54a050ae5ae6
Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ScriptHelper.exe4.1.4.9485592bb4eScriptHelper.exe4.1.4.9485592bb4ec00000050002bf58118401d0c705b5769044C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exeC:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exef54cd6ec-32f8-11e5-829d-54a050ae5ae6
Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: UpdateChecker.exe0.0.0.054dc4378alvupdt.dll1.0.0.105510b8fcc000000500016eb634c01d0be8898fb42ceC:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exeC:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll8167e08d-32f0-11e5-829d-54a050ae5ae6
Error: (07/25/2015 07:13:30 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: USBChargerPlus.exe3.1.9.432c01d0be67614cc6a922C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe6657e70b-32f0-11e5-829d-54a050ae5ae6
Error: (07/25/2015 07:12:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.209111c2401d0be88996b8bd94294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exeddc9673c-2a7b-11e5-829d-54a050ae5ae6microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (07/15/2015 12:58:36 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar-2147023170
Error: (07/14/2015 09:41:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1
Error: (07/14/2015 09:18:31 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1
Error: (07/04/2015 07:02:57 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"C:\Program Files\Microsoft Office 15\root\office15\lync.exe.ManifestC:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL1
CodeIntegrity:
===================================
Date: 2015-08-05 20:43:49.737
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-14 21:18:19.693
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-04 15:39:01.005
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-04 15:05:01.032
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-25 17:57:13.618
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-21 16:02:51.020
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-19 17:02:04.404
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-19 15:55:58.598
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-13 18:51:57.167
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-05 20:26:19.320
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8075.27 MB
Verfügbarer physikalischer RAM: 5421.5 MB
Summe virtueller Speicher: 9355.27 MB
Verfügbarer virtueller Speicher: 6491.05 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:302.73 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.62 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 3483A440)
Partition: GPT.
==================== Ende von Ergebnis ============================
|
|
13.08.2015, 08:20
| #6 |
| /// the machine /// TB-Ausbilder | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) |
|
14.08.2015, 16:59
| #7 |
| | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) So, hab jetzt alles ausgeführt. Hatte anfangs ein paar Probleme, da ich den Windows Defender ganz vergessen hatte. Oh Junge, der Laptop rennt viel schneller!!! mbam Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 13.08.2015 Suchlaufzeit: 10:13 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.08.13.02 Rootkit-Datenbank: v2015.08.06.01 Lizenz: Testversion Malware-Schutz: Aktiviert Schutz vor bösartigen Websites: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Selina Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 417821 Abgelaufene Zeit: 52 Min., 15 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 2 PUP.Optional.BrowseFox.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, 3128, Löschen bei Neustart, [164061a7325985b1cae6fcd182800ff1] PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 1380, Löschen bei Neustart, [8ccabd4b52391a1c499f43ecc83b2ed2] Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 146 PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [164061a7325985b1cae6fcd182800ff1], PUP.Optional.BrowseFox.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, In Quarantäne, [164061a7325985b1cae6fcd182800ff1], PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [164061a7325985b1cae6fcd182800ff1], PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [164061a7325985b1cae6fcd182800ff1], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.SupTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [6beb95738506cc6a76c6a0f93bc7b24e], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.LuckyTab.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{950ef4df-b9dd-4b97-9e34-5c7d25a5eb88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{567E42F2-33AD-4CF6-BB6D-03C450A52D7D}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{b03eb020-8a0b-431d-ae85-3600a2c9df68}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{950EF4DF-B9DD-4B97-9E34-5C7D25A5EB88}, In Quarantäne, [8fc7ef19ef9c1c1ad502256e857d7a86], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{138E44EF-8988-4DC7-8F48-FBC4FCEF83D1}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BB50CC62-09E1-4DD9-912C-F1DA4D6D71D8}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E481A870-86C7-44E1-97DF-E759FC147CBE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FE332809-93C1-48DF-929F-AEC0BC4BFCFE}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{41F978F3-431A-4464-A789-5C0692D562FB}, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C1EC170E-C5ED-4100-9078-559C31AFDBF5}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0079F2AC-4B9D-47BB-845C-752AC0708644}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{154FDDA9-A1AE-43C9-87D3-A0090EB8F50B}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9EEC5519-591B-4F67-9E22-2C18C01E0699}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C7CA0368-A12C-4575-AC50-CE1734049FF2}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0079F2AC-4B9D-47BB-845C-752AC0708644}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{154FDDA9-A1AE-43C9-87D3-A0090EB8F50B}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9EEC5519-591B-4F67-9E22-2C18C01E0699}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C7CA0368-A12C-4575-AC50-CE1734049FF2}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0079F2AC-4B9D-47BB-845C-752AC0708644}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{154FDDA9-A1AE-43C9-87D3-A0090EB8F50B}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9EEC5519-591B-4F67-9E22-2C18C01E0699}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C7CA0368-A12C-4575-AC50-CE1734049FF2}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C1EC170E-C5ED-4100-9078-559C31AFDBF5}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C1EC170E-C5ED-4100-9078-559C31AFDBF5}, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A220BAB5-C335-48BA-8A01-309FDA37446F}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A220BAB5-C335-48BA-8A01-309FDA37446F}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A220BAB5-C335-48BA-8A01-309FDA37446F}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7D7DC692-982E-45B7-A6BF-17FCC4116652}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8F9CF0DE-24F7-4C18-907F-B4040F311E63}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B022C8F0-0147-458C-BEC6-708E525402ED}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{230332DF-D235-47EE-BC42-60860EF144CD}, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{57B0DCF0-8B40-4449-8AA4-E297D6E779D4}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{002FF249-4A02-44F8-BD0F-7389AC5F3E70}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8F99377E-3B52-45E7-AC41-ACCAA945F8B1}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B2BBEAD-1A03-4927-8EB7-AC8292E4EB2F}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{002FF249-4A02-44F8-BD0F-7389AC5F3E70}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8F99377E-3B52-45E7-AC41-ACCAA945F8B1}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9B2BBEAD-1A03-4927-8EB7-AC8292E4EB2F}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{002FF249-4A02-44F8-BD0F-7389AC5F3E70}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8F99377E-3B52-45E7-AC41-ACCAA945F8B1}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9B2BBEAD-1A03-4927-8EB7-AC8292E4EB2F}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{57B0DCF0-8B40-4449-8AA4-E297D6E779D4}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{57B0DCF0-8B40-4449-8AA4-E297D6E779D4}, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.YahooSearch.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Search, Löschen bei Neustart, [20363bcd6328f64062e344d3996a827e], PUP.Optional.YahooSearch.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Search Updater, Löschen bei Neustart, [cc8ab15753389c9ab59046d145be3fc1], PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [2b2bb850bccfbc7a58eea0067e86ef11], PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\delta-homesSoftware, In Quarantäne, [6ee88583d0bbec4ab8e678cbe320fc04], PUP.Optional.FasterLight.A, HKLM\SOFTWARE\WOW6432NODE\Faster Light, In Quarantäne, [b6a075937615b185b196af824eb5f709], PUP.Optional.FFPluginHp.A, HKLM\SOFTWARE\WOW6432NODE\FFPluginHp, In Quarantäne, [66f025e3f794d5611433ab716b98f40c], PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, In Quarantäne, [10468880fa9191a58730d95344bf718f], PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\Mindspark, In Quarantäne, [a9adcf3958339e9831c471247e8608f8], PUP.Optional.Picexa.A, HKLM\SOFTWARE\WOW6432NODE\Picexa, In Quarantäne, [223480885b3070c66c96e6bf2ed6f60a], PUP.Optional.Picexa.A, HKLM\SOFTWARE\WOW6432NODE\PicexaSvc, In Quarantäne, [92c45eaae2a90a2c53b07f263bc9837d], PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, In Quarantäne, [6ceaec1cf695a98d625a3b54d0345ca4], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, In Quarantäne, [f95dc93fc8c350e606712817e51eb050], PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\vi-viewSoftware, In Quarantäne, [c4926c9c0e7d6bcb7eab1519649f8080], PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [9db926e20c7fcd69ec32d6d28d770ef2], PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, In Quarantäne, [aaac77912b60db5b8d92f4b44cb809f7], PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [7adccd3bddae42f4cb7b406643c1936d], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [2c2ab157cac11f175323eb547e854fb1], PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, In Quarantäne, [8ccabd4b52391a1c499f43ecc83b2ed2], PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, In Quarantäne, [263016f2d7b48aac0d4440f65ba86c94], PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, In Quarantäne, [ce88b553286380b6cd8594a2ed16b14f], PUP.Optional.SuperOptimizer.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [c88e8583375482b48f8e198f6b99c13f], PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\Faster Light, In Quarantäne, [6aece0281d6e7cba0a3c1b165ea54db3], PUP.Optional.InstallCore.C, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\InstallCore, In Quarantäne, [5006ce3ad3b879bd1dfc33750afaa25e], PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [5ef8947426657eb8af6eceda2bd9847c], PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [292d16f21c6fea4c1f9f39e55da6b64a], PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}, In Quarantäne, [90c6bc4c5536af877fae0f961fe54fb1], PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [56003eca3853df57a59d809f9f64a55b], PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{95B7759C-8C7F-4BF1-B163-73684A933233}, In Quarantäne, [e2749f69f09b9b9bb20c829cfc07bc44], PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, In Quarantäne, [90c60206236868cecaf4f7275da64cb4], PUP.Optional.QuickSearch.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MOZILLA\EXTENDS, In Quarantäne, [d28426e2a4e775c1ce8eb5680df6d729], PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\OPTIMIZER PRO, In Quarantäne, [31253eca13786cca4cad5055ba4ab64a], PUP.Optional.KeepMySearch.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\keepmysearch, In Quarantäne, [f26474944c3ffb3b342caa87bd4653ad], PUP.Optional.FasterLight.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\Faster Light, In Quarantäne, [d58123e50289a49254f20829857eff01], PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, In Quarantäne, [f165a95f16753cfa3ce10f9991731be5], PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}, In Quarantäne, [223452b67d0e082ef33aedb87c887789], PUP.Optional.ViView.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [85d1f315e4a78fa7947cd7d0ab590ef2], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8ffb2166-b719-4f1e-b522-b691255401c4}, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\CLSID\{8FFB2166-B719-4F1E-B522-B691255401C4}, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_.9, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_.9, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P8ffb2166_b719_4f1e_b522_b691255401c4_.P8ffb2166_b719_4f1e_b522_b691255401c4_.9, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], PUP.Optional.BestAdBlocker.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{8FFB2166-B719-4F1E-B522-B691255401C4}, In Quarantäne, [9bbbf117513a91a576e7d582f21318e8], Registrierungswerte: 20 PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [2b2bb850bccfbc7a58eea0067e86ef11] PUP.Optional.QuickSearch.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_searchff@gmail.com, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\quick_searchff@gmail.com, In Quarantäne, [d97dd533e2a902347db7f72622e1f30d] PUP.Optional.SweetSearch.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|sweetsearch@gmail.com, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\sweetsearch@gmail.com, In Quarantäne, [56000206503b8fa792a3a37a71928c74] PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [7adccd3bddae42f4cb7b406643c1936d] PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, cor, In Quarantäne, [2c2ab157cac11f175323eb547e854fb1] PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [292d16f21c6fea4c1f9f39e55da6b64a] PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|FaviconURL, hxxp://rts.dsrlte.com/favicon.ico, In Quarantäne, [90c6bc4c5536af877fae0f961fe54fb1] PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [cf87a95f424986b0ab13f42a6f946e92] PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|TopResultURL, hxxp://rts.dsrlte.com/?affID=na&q={searchTerms}&r=835, In Quarantäne, [193de127c3c8b284a786119433d1e11f] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, delta-homes, In Quarantäne, [56003eca3853df57a59d809f9f64a55b] PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [f561bf496c1fd85e932b5ac444bf38c8] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURL, hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, In Quarantäne, [f26453b5f893340256ec42dd8e757987] PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{95B7759C-8C7F-4BF1-B163-73684A933233}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [e2749f69f09b9b9bb20c829cfc07bc44] PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}, In Quarantäne, [90c60206236868cecaf4f7275da64cb4] PUP.Optional.QuickSearch.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MOZILLA\EXTENDS|appid, quick_searchff@gmail.com, In Quarantäne, [d28426e2a4e775c1ce8eb5680df6d729] PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\OPTIMIZER PRO|AdsBuyNowURL, hxxp://www.safeshopgate.com/r?s=121000600&g=50907621-D5D7-B54F-AFF0-2DED8B057C94, In Quarantäne, [31253eca13786cca4cad5055ba4ab64a] PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|FaviconURL, hxxp://rts.dsrlte.com/favicon.ico, In Quarantäne, [223452b67d0e082ef33aedb87c887789] PUP.Optional.Dsrlte.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27EA1DCC-C1CD-4AEB-BE5E-53F35C5DA2AF}|URL, hxxp://rts.dsrlte.com/?affID=na&q={searchTerms}&r=835, In Quarantäne, [89cd97715f2c04327ab3e8bd2adaae52] PUP.Optional.ViView.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, In Quarantäne, [85d1f315e4a78fa7947cd7d0ab590ef2] PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-2923131921-1963989444-91532992-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Optimizer Pro, C:\Program Files (x86)\Optimizer Pro 3.16\OptProLauncher.exe, In Quarantäne, [93c30afe92f98fa76197fea7b74d8878] Registrierungsdaten: 15 PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[a1b57e8ac0cbc17599413b15b055bc44] PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[fd5926e212797bbba137fa567d88c63a] PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[5afc59af33588da92bcb49fb3acb5aa6] PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (www.google.com), Schlecht: (hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[73e3cd3b256695a1cc079cb415f0b54b] PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[11450ff91477ba7caa4cb29251b41fe1] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[97bf77918506a393f52b341c57ae08f8] PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (Chrome.exe), Schlecht: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[7ed84eba622981b525b53d13ea1b758b] PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?type=sc&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[55017e8ac4c77cbacb0d71df36cfbf41] PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[8fc74bbda1ea3ef801f5f45060a52dd3] PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (www.google.com), Schlecht: (hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[b89ef810e5a64ee8b221b49c36cf758b] PUP.Optional.ViView.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[d68075934447c47235c1bc88c144b54b] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[b4a2ec1c0a81a3930d133e12739205fb] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[45117593ed9ed0669e36a8a8d1340000] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772, Gut: (www.google.com), Schlecht: (hxxp://www.delta-homes.com/?type=hp&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772),Ersetzt,[ed698088018a1b1b468e410f04015aa6] PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-2923131921-1963989444-91532992-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://search.delta-homes.com/web/?type=ds&ts=1431679656&z=4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z&from=wpm05153&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}),Ersetzt,[b79fde2a2a618da99a3a054be4218977] Ordner: 149 PUP.Optional.QueenCoupon.A, C:\Program Files (x86)\QueoEnCCoupon, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SaleePlous, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\image, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144, In Quarantäne, [8fc738d09bf03204f7e66637709403fd], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp, In Quarantäne, [8fc738d09bf03204f7e66637709403fd], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.Multiplug.Gen, C:\ProgramData\{b24c6d34-3e05-9102-b24c-c6d343e0b4d0}, In Quarantäne, [9bbbdf29850675c126ba633a1be9867a], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\content, In Quarantäne, [fd5940c848433ef862892c7135cf17e9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net, In Quarantäne, [fd5940c848433ef862892c7135cf17e9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\content, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\content, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\content, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\content, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\content, In Quarantäne, [fb5bed1b1378a59123c86a3301036799], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com, In Quarantäne, [fb5bed1b1378a59123c86a3301036799], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\content, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c], PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CCleicckoForSuale, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CllickFooRSaLe, In Quarantäne, [80d6ac5cfc8fcf675ef9c8d6fd07db25], PUP.Optional.LuckyShopper.A, C:\Program Files (x86)\LucckySHoppErr, In Quarantäne, [6aec2eda1f6c82b4aad7039b23e13fc1], PUP.Optional.PerfectCoupon.A, C:\Program Files (x86)\tperfectcoouepon, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.SaverBox.A, C:\Program Files (x86)\Suaverabbox, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e], PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62], PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj, In Quarantäne, [8ccae820adde02342008326da262738d], PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72], PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker, In Quarantäne, [65f121e707842016f77dfca3f01401ff], PUP.Optional.Picexa.A, C:\Users\Selina\AppData\Roaming\Picexa Viewer\log, In Quarantäne, [0f470206d4b7bc7a6b93485cb351c33d], PUP.Optional.Picexa.A, C:\Users\Selina\AppData\Roaming\Picexa Viewer, In Quarantäne, [0f470206d4b7bc7a6b93485cb351c33d], PUP.Optional.Picexa.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa, In Quarantäne, [e5713ecaf794e84e738ea104828207f9], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], Rogue.Multiple, C:\ProgramData\1078601655, In Quarantäne, [ed690cfc5f2c1026a3cc22b1ed1529d7], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, In Quarantäne, [ada9a95fb2d984b2436c6a88729060a0], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, In Quarantäne, [ada9a95fb2d984b2436c6a88729060a0], PUP.Optional.PayByAds.A, C:\Users\Selina\AppData\Local\Pay-By-Ads, In Quarantäne, [2630080089023cfa3fda6193cc36b24e], PUP.Optional.PayByAds.A, C:\Users\Selina\AppData\Local\Pay-By-Ads\Yahoo! Search, In Quarantäne, [2630080089023cfa3fda6193cc36b24e], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Löschen bei Neustart, [67eff315a4e7191d5cfa7f7580827987], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [67eff315a4e7191d5cfa7f7580827987], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.EzDownloader.A, C:\Users\Selina\AppData\Roaming\EZDownloader, In Quarantäne, [2a2c16f2afdc2115d33f9d6b4bb8619f], PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [36201deb7615b3831831b94fdf248c74], PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [36201deb7615b3831831b94fdf248c74], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en-US, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es-419, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it-CH, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pl, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\tr, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\vi, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults\preferences, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5], PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5], Dateien: 346 PUP.Optional.BrowseFox.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, Löschen bei Neustart, [164061a7325985b1cae6fcd182800ff1], PUP.Optional.LuckyTab.A, C:\Program Files (x86)\XTab\SupTab.dll, In Quarantäne, [243296721e6d5dd9f2edd8b852b07e82], PUP.Optional.Mindspark.A, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R1KXAQH.exe, In Quarantäne, [1a3c25e3117ac076e6080d7623e238c8], Spyware.KGBSpy, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R81LU9P.crdownload, In Quarantäne, [30266c9c2d5e50e6e70e530e31d4857b], PUP.Optional.MultiPlug.Uns, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RT1U4UU\SharkManCoupon.exe, In Quarantäne, [d4820701f89383b36e9e94edc33fca36], PUP.Optional.PayByAds.A, C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\res.dll, In Quarantäne, [5402050391fab28465b13b42b84da15f], PUP.Optional.OpenCandy, C:\Users\Selina\AppData\Local\Temp\is-SAK4S.tmp\OCSetupHlp.dll, In Quarantäne, [a8aed632602b8aac5ea6611509fc5aa6], PUP.Optional.EZDownloader.A, C:\Users\Selina\AppData\Local\Temp\5A00\temp\EzDownloader_setup.exe, In Quarantäne, [58fe2bddd4b7fc3a68bf32ef6f9130d0], PUP.Optional.PCMechanic, C:\Users\Selina\AppData\Local\Temp\is-4EM59.tmp\pm-standalone-setup.exe, In Quarantäne, [aea8bd4b18733cfaa0df53737889f60a], PUP.Optional.EZDownloader.A, C:\Users\Selina\AppData\Local\Temp\BF80\temp\EzDownloader_setup.exe, In Quarantäne, [c3938d7b0f7c2c0a69be0f1227d9c739], PUP.Optional.DefaultSearchProtected.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\defsearchp@gmail.com.xpi, In Quarantäne, [f85e15f3454613231a12041531d2ee12], PUP.Optional.Ask.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mppnoffgpafgpgbaigljliadgbnhljfl_0.localstorage, In Quarantäne, [d680ee1acac1e254da654bd0e91afb05], PUP.Optional.Ask.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mppnoffgpafgpgbaigljliadgbnhljfl_0.localstorage-journal, In Quarantäne, [69ed38d00586b284e758b665768da45c], PUP.Optional.Dsrlte.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\dsrlte.xml, In Quarantäne, [82d4cc3c444735018525889326dddd23], PUP.Optional.QueenCoupon.A, C:\Program Files (x86)\QueoEnCCoupon\shQpdAFCnAZ1ea.tlb, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.QueenCoupon.A, C:\Program Files (x86)\QueoEnCCoupon\shQpdAFCnAZ1ea.dat, In Quarantäne, [4610db2d62296bcb3fd0f02cbd463dc3], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SaleePlous\u2CXcXDCFuf2ZD.tlb, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SaleePlous\u2CXcXDCFuf2ZD.dat, In Quarantäne, [1b3b49bf8902b87e83e734e9eb18fb05], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.tlb, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\SAlePlUS.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\uzmcwZ9ouEEihR.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\uzmcwZ9ouEEihR.tlb, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.SalePlus.A, C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.dat, In Quarantäne, [e76f7d8bbbd0f5412a40e33a3cc7ea16], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\uninstall.exe, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\install.data, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\searchProvider.xml, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about_bk.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn_apply.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\close.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf.xml, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf_back.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\input_bk.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\logo.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\main.xml, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_1.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_2.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\settings.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\data.html, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE.html, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE8.html, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\main.css, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\ver.txt, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\google_trends.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon128.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon16.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon48.png, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\loading.gif, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\logo32.ico, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\common.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ga.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.xdomainrequest.min.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\js.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\library.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xdomain.min.js, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, In Quarantäne, [0a4c2cdc355645f1dedac06ced1649b7], PUP.Optional.BoostSaves.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, In Quarantäne, [db7b17f1cdbe91a51ac643ecb54e17e9], PUP.Optional.BoostSaves.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, In Quarantäne, [41157f899fecd4625789b17e14ef8080], PUP.Optional.Delta.ShrtCln, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\delta-homes.xml, In Quarantäne, [bf977f896d1ee155d162ee5d7192ce32], PUP.Optional.YahooSearch.A, C:\Windows\System32\Tasks\Yahoo! Search, In Quarantäne, [b89e7593ddaeca6cca5c65323cc8d42c], PUP.Optional.YahooSearch.A, C:\Windows\System32\Tasks\Yahoo! Search Updater, In Quarantäne, [213523e567243ef827ff187f6e96a759], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\lsdb.js, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\background.html, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\content.js, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\jM93kRbtV.js, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\manifest.json, In Quarantäne, [c690ba4e157648ee1cc1603d37cdad53], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\lsdb.js, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\background.html, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\content.js, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjaicoojlfoococemdcaollmhaiolole\236\manifest.json, In Quarantäne, [8bcb23e5761592a4b32a66376f95ea16], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\lsdb.js, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\background.html, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\C.js, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\content.js, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\manifest.json, In Quarantäne, [20367296d8b3a69000dd1b828282ee12], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\lsdb.js, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\background.html, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\content.js, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\CXd5xraYuF.js, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\manifest.json, In Quarantäne, [76e0e4246c1f96a01fbefe9fab59669a], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\lsdb.js, In Quarantäne, [8fc738d09bf03204f7e66637709403fd], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\background.html, In Quarantäne, [8fc738d09bf03204f7e66637709403fd], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\content.js, In Quarantäne, [8fc738d09bf03204f7e66637709403fd], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\kajfghlhfkcocafkcjlajldicbikpgnp\144\manifest.json, In Quarantäne, [8fc738d09bf03204f7e66637709403fd], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\lsdb.js, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\background.html, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\content.js, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\IAH0.js, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\manifest.json, In Quarantäne, [c19519ef4e3dbc7ad10ca5f851b3e020], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\lsdb.js, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\background.html, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\content.js, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\jM93kRbtV.js, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnpobogcpnkgjpfjcmmgppgpmihanimo\156\manifest.json, In Quarantäne, [3521907817745ed88954ff9e0ef64cb4], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\lsdb.js, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\background.html, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\C.js, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\content.js, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\icoloanbecehinobmflpeglknkplbfbm\212\manifest.json, In Quarantäne, [272f0701127957df18c589147f8504fc], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\lsdb.js, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\background.html, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\content.js, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\CXd5xraYuF.js, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkpahjicmehopmlkbenbkmckcedlcmhk\158\manifest.json, In Quarantäne, [164021e73d4e7eb8c21b98050bf98e72], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\lsdb.js, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\background.html, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\content.js, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\IAH0.js, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkpcjfgdlfelfjldoebklcimbekfeami\230\manifest.json, In Quarantäne, [1b3be226800b2c0ab429c9d4986c2ad6], PUP.Optional.Multiplug.Gen, C:\ProgramData\{b24c6d34-3e05-9102-b24c-c6d343e0b4d0}\Download.dat, In Quarantäne, [9bbbdf29850675c126ba633a1be9867a], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\content\bg.js, In Quarantäne, [fd5940c848433ef862892c7135cf17e9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\bootstrap.js, In Quarantäne, [fd5940c848433ef862892c7135cf17e9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\chrome.manifest, In Quarantäne, [fd5940c848433ef862892c7135cf17e9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\2u@EgTVxea.net\install.rdf, In Quarantäne, [fd5940c848433ef862892c7135cf17e9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\content\bg.js, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\bootstrap.js, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\chrome.manifest, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\J@C9jg.com\install.rdf, In Quarantäne, [74e2a36552394ee839b29b023aca5aa6], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\content\bg.js, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\bootstrap.js, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\chrome.manifest, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\JQzw@H.com\install.rdf, In Quarantäne, [70e622e6b0dbb87e3bb0c7d6fd079070], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\content\bg.js, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\bootstrap.js, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\chrome.manifest, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\LFE@Ba.edu\install.rdf, In Quarantäne, [f85eca3e8407fd3934b72a73e61e4eb2], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\content\bg.js, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\bootstrap.js, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\chrome.manifest, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\r@L.co.uk\install.rdf, In Quarantäne, [3c1aed1b8cff01358467fda0917337c9], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\content\bg.js, In Quarantäne, [fb5bed1b1378a59123c86a3301036799], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\bootstrap.js, In Quarantäne, [fb5bed1b1378a59123c86a3301036799], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\chrome.manifest, In Quarantäne, [fb5bed1b1378a59123c86a3301036799], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yl6lAIg@1.com\install.rdf, In Quarantäne, [fb5bed1b1378a59123c86a3301036799], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\content\bg.js, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\bootstrap.js, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\chrome.manifest, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c], PUP.Optional.MultiPlug.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\Yvj@q.net\install.rdf, In Quarantäne, [3422de2a24671c1a88636e2f8381d42c], PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CCleicckoForSuale\1CFwcCZax6aCph.tlb, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CCleicckoForSuale\1CFwcCZax6aCph.dat, In Quarantäne, [ed69e0282a6168ce6dea128c5fa50ff1], PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CllickFooRSaLe\yJGRXsrRdPAxq9.tlb, In Quarantäne, [80d6ac5cfc8fcf675ef9c8d6fd07db25], PUP.Optional.ClickForSale.A, C:\Program Files (x86)\CllickFooRSaLe\yJGRXsrRdPAxq9.dat, In Quarantäne, [80d6ac5cfc8fcf675ef9c8d6fd07db25], PUP.Optional.LuckyShopper.A, C:\Program Files (x86)\LucckySHoppErr\JOhaNEmOo3P6cj.tlb, In Quarantäne, [6aec2eda1f6c82b4aad7039b23e13fc1], PUP.Optional.LuckyShopper.A, C:\Program Files (x86)\LucckySHoppErr\JOhaNEmOo3P6cj.dat, In Quarantäne, [6aec2eda1f6c82b4aad7039b23e13fc1], PUP.Optional.PerfectCoupon.A, C:\Program Files (x86)\tperfectcoouepon\WV0zUTPFPSX3oa.tlb, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.PerfectCoupon.A, C:\Program Files (x86)\tperfectcoouepon\WV0zUTPFPSX3oa.dat, In Quarantäne, [9bbb2fd9a6e5dc5abfc9504ec044a858], PUP.Optional.SaverBox.A, C:\Program Files (x86)\Suaverabbox\Rw31RrITanFDDC.tlb, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.SaverBox.A, C:\Program Files (x86)\Suaverabbox\Rw31RrITanFDDC.dat, In Quarantäne, [b0a645c3dfac52e4703a37679c6824dc], PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\lsdb.js, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e], PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\background.html, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e], PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\content.js, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e], PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\manifest.json, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e], PUP.Optional.MultiPlug, C:\ProgramData\aaegpibphpehghjbadcjpmfmcfpddjim\S.js, In Quarantäne, [9cba7a8e82095bdb44e4504fd82c926e], PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\lsdb.js, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62], PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\background.html, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62], PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\content.js, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62], PUP.Optional.MultiPlug, C:\ProgramData\fjcjkgkjcfakpeiojmljigibblfagdja\manifest.json, In Quarantäne, [82d4bc4c8407e6500127fba4ef159e62], PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\lsdb.js, In Quarantäne, [8ccae820adde02342008326da262738d], PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\background.html, In Quarantäne, [8ccae820adde02342008326da262738d], PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\content.js, In Quarantäne, [8ccae820adde02342008326da262738d], PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\manifest.json, In Quarantäne, [8ccae820adde02342008326da262738d], PUP.Optional.MultiPlug, C:\ProgramData\gfnkloieabjhkochmlabmabgpncnkdbj\ZvfK7UncxV.js, In Quarantäne, [8ccae820adde02342008326da262738d], PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\lsdb.js, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72], PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\background.html, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72], PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\content.js, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72], PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\manifest.json, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72], PUP.Optional.MultiPlug, C:\ProgramData\jjgpigijceopgppohlmendhooepjphna\onpoQ.js, In Quarantäne, [0056c840fe8d9e98d553c4dbe0248e72], PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\lsdb.js, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef], PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\background.html, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef], PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\content.js, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef], PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\EaSVrE9.js, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef], PUP.Optional.MultiPlug, C:\ProgramData\jjhlcnaaggekoebfjhcbnpdhcadnbnle\manifest.json, In Quarantäne, [fd591deb3853d16553d50e91f80c11ef], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\pBvkDFx6EE6rgd.tlb, In Quarantäne, [65f121e707842016f77dfca3f01401ff], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\pBvkDFx6EE6rgd.dat, In Quarantäne, [65f121e707842016f77dfca3f01401ff], PUP.Optional.BestAdBlocker.A, C:\Program Files (x86)\bestadblocker\PYMYWRFbYh7Fwk.dat, In Quarantäne, [65f121e707842016f77dfca3f01401ff], PUP.Optional.Picexa.A, C:\Users\Selina\AppData\Roaming\Picexa Viewer\log\install.log, In Quarantäne, [0f470206d4b7bc7a6b93485cb351c33d], PUP.Optional.Picexa.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa\Picexa.lnk, In Quarantäne, [e5713ecaf794e84e738ea104828207f9], PUP.Optional.Picexa.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa\uninstall.lnk, In Quarantäne, [e5713ecaf794e84e738ea104828207f9], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\093e84014faeb6d2aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\76c6371ecd7d090faa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\1878c1afe37a6843aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\242c2fd4536773faaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\2b262019a8e6c4cdaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\2dd11d7d55568f75aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\3ed03cfb56800283aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\5175a0130ed5b449aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\677e21cb1851e9baaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\8465c1fdfb127aa3aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\87b1cffeb795e9ffaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\88ca0666a8bc42bcaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\9bec11cdd23aeb05aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\c295e559d046ad1eaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\cd5b15e575e1c3d0aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\cf529e7074de5586aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\d236748b2ecd3b60aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\d5fe86451e44dffcaa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\dd4a2c5f72b1804baa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.MultiPlug.Gen, C:\ProgramData\14404635936377688143\e7a261f5c12d8405aa66e73d6f54ffec.ini, In Quarantäne, [9cba8583c2c90b2b347ae5c8db29e719], PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, Löschen bei Neustart, [8ccabd4b52391a1c499f43ecc83b2ed2], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, In Quarantäne, [ada9a95fb2d984b2436c6a88729060a0], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, In Quarantäne, [67eff315a4e7191d5cfa7f7580827987], PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\update.exe, In Quarantäne, [67eff315a4e7191d5cfa7f7580827987], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit-ie8.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit2.0.js, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, In Quarantäne, [3620c3456f1cbf77861462959d656d93], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome.manifest, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\install.rdf, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\awesome.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\awesome.xul, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\index.html, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\quick_start.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\icon.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\loading.gif, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\logo.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\luck.png, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\newtab.ico, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\simple.css, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\chrome\skin\style.css, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\addonmanager.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\aes.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\config.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\dialogs.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\last_tab.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\misc.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\properties.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\remoterequest.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\restoreprefs.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\default_newtabff@gmail.com\modules\settings.js, In Quarantäne, [57ff2adee1aa47ef2564997a6f94d030], PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\manifest.json, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5], PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\background.js, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5], PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\content.js, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5], PUP.Optional.FasterLight.A, C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjaeedhlmcojmmhngnbankkodcdlenh\1.0.1_0\icon.png, In Quarantäne, [76e07692dbb044f25d27a0e5e91c3bc5], PUP.Optional.QuickStart.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");), Ersetzt,[104644c4fa91f244d51f1276f80d9c64] PUP.Optional.DefaultNewTab.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (default_newtabff@gmail.com), Ersetzt,[59fd0cfc86052a0c2a7e9fee41c40df3] PUP.Optional.DefaultProtectedSearch.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (defsearchp@gmail.com), Ersetzt,[5006cc3cb4d755e1545586075fa654ac] PUP.Optional.SweetSearch.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\prefs.js, Gut: (), Schlecht: (sweetsearch@gmail.com), Ersetzt,[2a2c38d06229989e7e33cbc23cc98080] PUP.Optional.ResultsHub.A, C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\search-simple.xml, In Quarantäne, [bc9a24e4aedd73c3e4da107ba263748c], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
14.08.2015, 17:02
| #8 |
| | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) adw Code:
ATTFilter # AdwCleaner v4.208 - Bericht erstellt 14/08/2015 um 17:15:58
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-08-12.1 [Server]
# Betriebssystem : Windows 8.1 (x64)
# Benutzername : Selina - SUNRISE
# Gestarted von : C:\Users\Selina\Downloads\AdwCleaner_4.208.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\rei
Ordner Gelöscht : C:\ProgramData\AVG Security Toolbar
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\Fighters
Ordner Gelöscht : C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}
Ordner Gelöscht : C:\ProgramData\{61d13d49-e262-aacb-61d1-13d49e26f527}
Ordner Gelöscht : C:\ProgramData\{6ecd4daa-dab7-5f51-6ecd-d4daadab36ab}
Ordner Gelöscht : C:\ProgramData\{83e52cc3-e98f-db14-83e5-52cc3e98b30f}
Ordner Gelöscht : C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fighters
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reimage repair
Ordner Gelöscht : C:\Program Files (x86)\FFlexibleShopper
Ordner Gelöscht : C:\Program Files (x86)\LLuckyoShopuper
Ordner Gelöscht : C:\Program Files (x86)\QueieenCouupOn
Ordner Gelöscht : C:\Program Files (x86)\SalePLius
Ordner Gelöscht : C:\Program Files (x86)\SaverAdDona
Ordner Gelöscht : C:\Program Files (x86)\SSalePlUUs
Ordner Gelöscht : C:\Program Files (x86)\TiocTaCoUPOn
Ordner Gelöscht : C:\Program Files (x86)\topDieeal
Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Fighters
Ordner Gelöscht : C:\Program Files\Reimage
Ordner Gelöscht : C:\Users\Anja\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Selina\AppData\Local\Mindspark_Interactive_Net
Ordner Gelöscht : C:\Users\Selina\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Selina\AppData\Roaming\Fighters
Ordner Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ffjcmnpnoopgilmnfhloocdcbnimmmea_0.localstorage
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ffjcmnpnoopgilmnfhloocdcbnimmmea_0.localstorage-journal
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nafaimnnclfjfedmmabolbppcngeolgf_0.localstorage
Datei Gelöscht : C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nafaimnnclfjfedmmabolbppcngeolgf_0.localstorage-journal
Datei Gelöscht : C:\Windows\Reimage.ini
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Goodgame Empire.lnk
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Goodgame Empire.lnk
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.delta-homes.com_0.localstorage
Datei Gelöscht : C:\Users\Selina\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.delta-homes.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : Reimage Reminder
Task Gelöscht : ReimageUpdater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Reimage.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\pc-mechanic
Schlüssel Gelöscht : HKLM\SOFTWARE\4f8e54c5-276f-4db6-0ff9-7e23cbe8abeb
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Reimage
Schlüssel Gelöscht : HKCU\Software\reimagerepair
Schlüssel Gelöscht : HKCU\Software\Avg Secure Update
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\AVG SafeGuard toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\hdcode
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Fighters
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKU\.DEFAULT\Software\Avg Secure Update
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\AVG Secure Search
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Reimage
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\delta-homes.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\vi-view.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.delta-homes.com
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17840
-\\ Mozilla Firefox v38.0.5 (x86 de)
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.iconURL", "hxxp://search.delta-homes.com/favicon.ico");
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.url", "hxxp://search.delta-homes.com/web/?type=ds&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.Fo8ypww4LXcTefwb.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.MoaCzqFv1H0kqxwv.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.T1H729OMT8gQgO4s.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.eXCrwMSmKQEjPlTQ.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.gSiOiY5M8tE2YN5e.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.pm8I7IOBxrZdHp9o.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[8cmuviq6.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.tUy0xVOGMHswu9j4.scode", "(function(){try{if(window.location.href.indexOf(\"rjsGqHY6qjk7pdkFrjUEpjY5qTa\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\[...]
-\\ Google Chrome v
[C:\Users\Anja\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Gelöscht [Extension] : jkpahjicmehopmlkbenbkmckcedlcmhk
[C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
[C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://myhome.vi-view.com/web/?type=ds&ts=1419774438&from=cor&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772&q={searchTerms}
[C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Startup_URLs] : E99AFE4F3468CFEC0C2891AD6F9996390F20CDD9983503FEDDF86C9C7D69B7C2"},"software_reporter":{"prompt_reason":"435CAFFE84F8E81536E5FF97F4AD3339210F3871EC20ABA68FC074184EF80F3C","prompt_seed":"C159244793EF19D00E070124A61834E914F1463C113271B77BEABFB03A4A62A6","prompt_version":"C0B08D1424D593A0CA963274B975E92B3B3BBA8018844CCC63DA34A5264A6FC5"},"sync":{"remaining_rollback_tries":"CB4B71268EE10464C146ACCEB9F097A68D6F4B5596BFAD4A4ED2FAE3E118A29C"}},"super_mac":"0E62C076E5481250C44E3259FBD5660AA912133EABF993E3BA48E24B27FB3AAB"},"safebrowsing":{"incidents_sent":{"1":{"extensions.settings":"1542131244"},"2":{"chrome.dll":"3774509266","chrome_child.dll":"3743713718"}}},"session":{"restore_on_startup":4,"startup_urls":["hxxp://www.delta-homes.com/?type=hp&ts=1432145919&z=b90eddd36164fc51f5cea57g9zdccocg5z4watbg0m&from=wpm05203&uid=ST1000LM024XHN-M101MBB_S32XJ9DF708772
-\\ Opera v0.0.0.0
*************************
AdwCleaner[R0].txt - [13146 Bytes] - [14/08/2015 17:13:22]
AdwCleaner[S0].txt - [12905 Bytes] - [14/08/2015 17:15:58]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12965 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.6 (08.10.2015:1)
OS: Windows 8.1 x64
Ran by Selina on 14.08.2015 at 17:24:47,66
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully deleted: [Service] suite service [Reboot required]
~~~ Tasks
Successfully deleted: [Task] C:\Windows\system32\tasks\TuneUpUtilities_Task_BkGndMaintenance2013
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\TuneUp Shredder Shell Extension
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update Faster Light
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Faster Light
~~~ Files
Successfully deleted: [File] C:\Users\Selina\AppData\Roaming\appdataFr3.bin
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage-journal
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage
Successfully deleted: [File] C:\Users\Selina\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage-journal
~~~ Folders
Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin
Successfully deleted: [Folder] C:\Windows\SysWOW64\amd64
Successfully deleted: [Folder] C:\Windows\SysWOW64\x86
~~~ FireFox
Successfully deleted the following from C:\Users\Selina\AppData\Roaming\mozilla\firefox\profiles\8cmuviq6.default\prefs.js
user_pref(browser.search.searchengine.alias, delta-homes);
user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.name, delta-homes);
user_pref(browser.search.searchengine.ptid, wpm05203);
user_pref(browser.search.searchengine.uid, ST1000LM024XHN-M101MBB_S32XJ9DF708772);
user_pref(browser.search.selectedEngine, delta-homes);
user_pref(extensions.sweetsearch@gmail.com.install-event-fired, true);
~~~ Chrome
[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Selina\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.08.2015 at 17:32:49,52
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Selina (Administrator) auf SUNRISE (14-08-2015 17:37:03)
Gestartet von C:\Users\Selina\Desktop
Geladene Profile: Selina (Verfügbare Profile: Selina & Anja)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser nicht gefunden!)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.4.9926.17994_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] ()
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [AoboAutoRun32] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock.dll",OK
HKLM\...\Policies\Explorer\Run: [AoboAutoRun64] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock64.dll",OK
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [BingSvc] => C:\Users\Selina\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen).
IFEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\fighterlauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe 2.1 PRO Full Crack.lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe 2.1 PRO Full Crack.lnk -> C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}\Sparkol VideoScribe 2.1 PRO Full Crack.exe (Keine Datei)
Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe Professional 2.1.0 Full(1).lnk [2015-04-15]
ShortcutTarget: Sparkol VideoScribe Professional 2.1.0 Full(1).lnk -> C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}\Sparkol VideoScribe Professional 2.1.0 Full(1).exe (Keine Datei)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.delta%2Dhomes.com%2F%3Ftype%3Dhp%26ts%3D1431679656%26z%3D4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z%26from%3Dwpm05153%26uid%3DST1000LM024XHN%2DM101MBB%5FS32XJ9DF708772&OSP=http%3A%2F%2Fdo%2Dsearch.com%2Fweb%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3D%26utm%5Fcampaign%3Dinstall%5Fie%26utm%5Fcontent%3Dds%26from%3D%26uid%3DST500DM002%2D1BC142%5FW2A27G6AXXXXW2A27G6A%26ts%3D1420373293%26type%3Ddefault%26q%3D%7BsearchTerms%7D
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SalePlus -> {0d5b8aad-5e9d-46bd-a6a9-b98c883b23f4} -> C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.x64.dll Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: SalePlus -> {ba254a32-0efe-4ce1-9c79-f2ba7a1490f7} -> C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.x64.dll Keine Datei
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-09-04] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-09-04] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{517FD05F-0702-4F6F-BB2C-247A2CEFCC94}: [DhcpNameServer] 192.168.8.1 192.168.8.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.google.at/
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-13] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-09-04] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation)
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-images.xml [2015-07-04]
FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-maps.xml [2015-07-04]
FF Extension: Bing Search - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\bingsearch.full@microsoft.com [2015-05-14]
FF Extension: Cliqz - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\cliqz@cliqz.com.xpi [2015-07-25]
FF Extension: Adblock Plus - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-31]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\cliqz@cliqz.com
Chrome:
=======
CHR Profile: C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-05]
CHR Extension: (YouTube) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-05]
CHR Extension: (Google Search) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-13]
CHR Extension: (Google Wallet) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-05]
CHR Extension: (Gmail) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-05]
StartMenuInternet: Google Chrome - Chrome.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S4 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2014-02-10] (Preventon Technologies Limited)
S4 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2014-02-10] (Preventon Technologies Limited)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
S2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
S2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
S2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
S2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)
S3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2014-02-10] ()
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-12] (Realsil Semiconductor Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
U3 NPF; kein ImagePath
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-14 17:37 - 2015-08-14 17:37 - 00021722 _____ C:\Users\Selina\Desktop\FRST.txt
2015-08-14 17:32 - 2015-08-14 17:36 - 00003171 _____ C:\Users\Selina\Desktop\JRT.txt
2015-08-14 17:24 - 2015-08-14 17:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-08-14 17:23 - 2015-08-14 17:23 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Selina\Downloads\JRT.exe
2015-08-14 17:20 - 2015-08-14 17:20 - 00013102 _____ C:\Users\Selina\Desktop\AdwCleaner[S0].txt
2015-08-14 17:13 - 2015-08-14 17:16 - 00000000 ____D C:\AdwCleaner
2015-08-14 17:12 - 2015-08-14 17:12 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe
2015-08-14 15:56 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-14 15:56 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-14 15:56 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-14 15:56 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-14 15:56 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-14 15:56 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-14 15:56 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-14 15:56 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-14 15:56 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-08-14 15:56 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-14 15:56 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-14 15:56 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-14 15:56 - 2015-07-16 21:45 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-08-14 15:56 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-14 15:56 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-14 15:56 - 2015-07-16 21:38 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-08-14 15:56 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-14 15:56 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-14 15:56 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-14 15:56 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-08-14 15:56 - 2015-07-16 21:13 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-08-14 15:56 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-14 15:56 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-14 15:56 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-14 15:56 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-14 15:56 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-14 15:56 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-08-14 15:56 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-14 15:56 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-14 15:56 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-14 15:56 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-14 15:55 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-14 15:55 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-14 15:55 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-14 15:55 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-14 15:55 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-14 15:53 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-08-14 15:53 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-08-14 15:52 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-08-14 15:52 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-08-14 15:52 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-08-14 15:51 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-14 15:51 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-14 15:51 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-14 15:51 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-14 15:50 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-14 15:50 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-14 15:50 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-14 15:48 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-14 15:48 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-14 15:47 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-14 15:47 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-08-14 15:47 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-14 15:47 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-14 15:46 - 2015-07-14 05:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-14 15:46 - 2015-07-14 05:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-14 15:46 - 2015-07-10 19:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-14 15:46 - 2015-07-10 18:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-14 15:46 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-08-14 15:46 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-08-14 15:46 - 2015-05-12 02:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-14 15:45 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-14 15:45 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-14 15:45 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-14 15:45 - 2015-07-24 20:57 - 04177408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-14 15:45 - 2015-07-24 20:57 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-14 15:45 - 2015-07-24 20:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-14 15:45 - 2015-07-24 19:27 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-14 15:45 - 2015-07-24 19:23 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-14 15:45 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-14 15:45 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-14 15:45 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-14 15:45 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-14 00:16 - 2015-08-14 00:16 - 00000032 _____ C:\ProgramData\Temp.log
2015-08-13 23:04 - 2015-08-13 23:04 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe.part
2015-08-13 23:03 - 2015-08-13 23:03 - 02173952 _____ (Farbar) C:\Users\Selina\Downloads\FRST64(1).exe
2015-08-13 22:58 - 2015-08-13 22:58 - 00000000 ____D C:\Users\Selina\Desktop\FRST-OlderVersion
2015-08-13 22:05 - 2015-08-13 22:05 - 00120116 _____ C:\Users\Selina\Desktop\mbam.txt
2015-08-13 10:12 - 2015-08-14 17:18 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 10:12 - 2015-08-13 10:12 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-13 10:12 - 2015-08-13 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-08-13 10:11 - 2015-08-13 10:12 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-08-13 10:11 - 2015-08-13 10:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 10:11 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-13 10:11 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-13 10:11 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-13 10:07 - 2015-08-13 10:07 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Selina\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-13 09:35 - 2015-08-13 09:35 - 00000750 _____ C:\Users\Selina\Desktop\Revo Uninstaller.lnk
2015-08-13 09:34 - 2015-08-13 09:34 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Selina\Downloads\revosetup95.exe
2015-08-12 13:51 - 2015-08-12 13:51 - 00055142 _____ C:\Users\Selina\Desktop\FRST1.txt
2015-08-12 13:51 - 2015-08-12 13:51 - 00041332 _____ C:\Users\Selina\Desktop\Addition1.txt
2015-08-12 11:31 - 2015-08-14 17:37 - 00000000 ____D C:\FRST
2015-08-12 11:30 - 2015-08-13 22:58 - 02173952 _____ (Farbar) C:\Users\Selina\Desktop\FRST64.exe
2015-08-05 20:25 - 2015-08-06 21:44 - 00000000 ____D C:\Users\Selina\Desktop\Youtube channel
2015-07-25 19:38 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-25 19:38 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-25 19:38 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-25 19:38 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-25 19:38 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-25 19:38 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-25 19:38 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-25 19:38 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-25 19:38 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-07-25 19:38 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-25 19:38 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-25 19:38 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-07-25 19:38 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-25 19:35 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-07-25 19:35 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-07-25 19:35 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-07-25 19:32 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-07-25 19:30 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-25 19:30 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-25 19:30 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-25 19:30 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-25 19:30 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-25 19:30 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-25 19:28 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2015-07-25 19:28 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2015-07-25 19:26 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-07-25 19:26 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-07-25 19:26 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-07-25 19:26 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-07-25 19:23 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-07-25 19:22 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2015-07-25 19:22 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2015-07-25 19:22 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2015-07-25 19:22 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2015-07-25 19:20 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2015-07-25 19:18 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-25 19:16 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-25 19:16 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-25 19:16 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-07-25 19:16 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-14 17:35 - 2015-06-10 19:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-14 17:29 - 2014-09-30 03:18 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923131921-1963989444-91532992-1001
2015-08-14 17:19 - 2014-09-30 03:13 - 00000000 ___DO C:\Users\Selina\OneDrive
2015-08-14 17:19 - 2014-07-31 19:27 - 01269707 _____ C:\Windows\WindowsUpdate.log
2015-08-14 17:17 - 2013-08-22 16:46 - 00097526 _____ C:\Windows\setupact.log
2015-08-14 17:17 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-14 17:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-08-14 17:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-08-14 16:51 - 2015-03-26 23:57 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014
2015-08-14 16:51 - 2014-03-18 10:16 - 00191386 _____ C:\Windows\PFRO.log
2015-08-14 16:49 - 2014-05-15 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-08-14 16:48 - 2014-05-15 17:58 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-08-14 16:22 - 2014-07-31 19:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-08-14 16:22 - 2014-05-16 01:45 - 00773008 _____ C:\Windows\system32\perfh007.dat
2015-08-14 16:22 - 2014-05-16 01:45 - 00162310 _____ C:\Windows\system32\perfc007.dat
2015-08-14 16:22 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-14 16:17 - 2015-04-10 18:56 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-14 16:15 - 2015-05-05 08:22 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-14 16:15 - 2013-08-22 16:44 - 00485720 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-14 16:12 - 2015-04-10 18:57 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-14 16:12 - 2014-12-28 01:09 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-14 16:12 - 2014-10-10 16:01 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-14 16:12 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-08-14 16:10 - 2014-10-20 18:24 - 00000000 ____D C:\Windows\system32\MRT
2015-08-14 16:02 - 2014-10-20 18:24 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-14 15:56 - 2015-03-27 00:00 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Skype
2015-08-14 15:52 - 2014-09-30 03:49 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{924A399C-D8A5-42C9-8053-6DBF492001E4}
2015-08-14 15:52 - 2014-09-30 03:42 - 00000000 ____D C:\Users\Selina\AppData\Roaming\WildTangent
2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ____D C:\ProgramData\WildTangent
2015-08-14 00:19 - 2014-10-05 10:48 - 00000000 ____D C:\ProgramData\CLSK
2015-08-13 23:45 - 2015-07-04 13:14 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Ethereal
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieUserList
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieSiteList
2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieBrowserModeList
2015-08-13 23:25 - 2014-10-05 10:06 - 00000000 ____D C:\Program Files (x86)\Google
2015-08-13 23:24 - 2015-04-08 00:00 - 00000000 ____D C:\Program Files (x86)\TechSmith
2015-08-13 23:21 - 2014-12-26 19:39 - 00000000 ____D C:\Users\Selina\AppData\Roaming\DVDVideoSoft
2015-08-13 23:17 - 2015-03-27 00:00 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-13 11:40 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2015-08-13 11:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PLA
2015-08-13 11:38 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-08-13 09:45 - 2014-12-31 23:49 - 00026624 ___SH C:\Users\Selina\Documents\Thumbs.db
2015-08-13 09:35 - 2015-06-10 19:03 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-13 09:23 - 2014-09-30 02:27 - 00000000 ____D C:\Users\Selina\AppData\Local\Packages
2015-08-12 14:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-08-11 14:51 - 2014-07-31 19:50 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-08-08 15:55 - 2015-05-17 12:53 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-08 15:55 - 2015-05-17 12:53 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-06 14:20 - 2014-07-31 19:50 - 00000000 ____D C:\ProgramData\McAfee
2015-08-06 14:14 - 2015-05-18 22:08 - 00000000 ____D C:\Users\Selina\AppData\Local\CrashDumps
2015-08-05 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2015-07-26 15:51 - 2015-04-23 23:31 - 00000000 ____D C:\Users\Selina\Desktop\USB Stick
2015-07-26 11:37 - 2014-09-30 22:28 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-25 19:18 - 2015-06-17 08:02 - 00000000 ____D C:\Program Files\Common Files\AV
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-03-18 19:08 - 2015-03-29 15:42 - 0000020 _____ () C:\Users\Selina\AppData\Local\appdataFr3.bin
2014-07-31 19:41 - 2014-07-31 19:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-03-14 14:02 - 2015-03-14 14:02 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-05-15 17:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-05-15 17:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-05-15 17:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
2015-08-14 00:16 - 2015-08-14 00:16 - 0000032 _____ () C:\ProgramData\Temp.log
2014-10-05 10:49 - 2014-10-05 10:51 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-10-05 10:48 - 2014-10-05 10:49 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS
Einige Dateien in TEMP:
====================
C:\Users\Selina\AppData\Local\Temp\BSvcProcessor.exe
C:\Users\Selina\AppData\Local\Temp\BSvcUpdater.exe
C:\Users\Selina\AppData\Local\Temp\JMC_WM.exe
C:\Users\Selina\AppData\Local\Temp\oi_{B8811E58-D5AA-4DBA-9149-2F98DB59161D}.exe
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdrv7.dll
C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdui7.dll
C:\Users\Selina\AppData\Local\Temp\Quarantine.exe
C:\Users\Selina\AppData\Local\Temp\regini.exe
C:\Users\Selina\AppData\Local\Temp\ReimagePackage.exe
C:\Users\Selina\AppData\Local\Temp\ReiSysUpdate.exe
C:\Users\Selina\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_36PJN-VMKQD-9PCVW-VW84P-D67T3_act_1_.exe
C:\Users\Selina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Selina\AppData\Local\Temp\sqlite3.dll
C:\Users\Selina\AppData\Local\Temp\sqlite3.exe
C:\Users\Selina\AppData\Local\Temp\UNINSTALL.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-05 20:40
==================== Ende von Ergebnis ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Selina (2015-08-14 17:38:05)
Gestartet von C:\Users\Selina\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2923131921-1963989444-91532992-500 - Administrator - Disabled)
Anja (S-1-5-21-2923131921-1963989444-91532992-1005 - Limited - Enabled) => C:\Users\Anja
Gast (S-1-5-21-2923131921-1963989444-91532992-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2923131921-1963989444-91532992-1003 - Limited - Enabled)
Selina (S-1-5-21-2923131921-1963989444-91532992-1001 - Administrator - Enabled) => C:\Users\Selina
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
Fighters (x32 Version: 4.5.146 - SPAMFIGHTER ApS) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 332.85 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.85 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
PixelPlanet PdfPrinter 7 (64bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 2.2.81) (Version: 2.2.81 - Sparkol)
Sparkol VideoScribe (x32 Version: 2.2.81 - Sparkol) Hidden
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Watchtower Library 2012 - Deutsch (HKLM-x32\...\{CFDF0961-77C7-4392-96EE-624DFE81C3C2}) (Version: 14.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> "C:\Windows\system32\igfxEM.exe" Keine Datei
==================== Wiederherstellungspunkte =========================
13-08-2015 23:09:56 Revo Uninstaller's restore point - McAfee LiveSafe – Internet Security
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {02554177-D27A-4093-8467-1296F3541CFE} - \Yahoo! Search -> Keine Datei <==== ACHTUNG
Task: {1C092132-88FB-41DC-8364-824E30BFAD4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1D77BDEF-A383-44E5-A8D5-3CF4D8699796} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {2761783C-2564-4D71-BD14-08A3EF337853} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-13] (Adobe Systems Incorporated)
Task: {2E93A9E0-3BEC-496C-9434-8021BDF4962C} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {3544FBEC-1A3C-457E-80A6-84D5FE4775A2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-14] (Microsoft Corporation)
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - \Yahoo! Search Updater -> Keine Datei <==== ACHTUNG
Task: {555E4B6D-40E1-43F1-B4F2-DC65CB4FC170} - System32\Tasks\{D4ED4DD4-E6F7-407F-8C09-B3EAACAFCBA5} => pcalua.exe -a C:\Users\Selina\AppData\Roaming\vi-view\UninstallManager.exe -c -ptid=cor
Task: {5E1D91C1-AC00-4421-867F-D6CAEAB30CA7} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2014-02-11] ()
Task: {649DAAEE-F738-41E9-9EF5-F4669CF3A588} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {744CE80B-F1BF-4F2E-8B11-8BB8381A7604} - System32\Tasks\{86E86F40-51C2-4AB3-87B4-A0C0DF4F4D34} => pcalua.exe -a "C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\setup.exe" -c -uninstall
Task: {945D81A6-4C2B-4F64-BF0A-E2ECDCC9FA81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {DD929979-D7D4-4DA4-8CB3-B333EEB553B6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {EA858E9F-4743-42FC-BD69-BD3A731EEF91} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {FD4022ED-7434-4DD9-B0AF-4BEA35891F08} - System32\Tasks\Opera scheduled Autoupdate 1419616129 => C:\Program Files (x86)\Opera\launcher.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-09-30 22:28 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-31 19:33 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Selina\OneDrive:ms-properties
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Selina\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "DptfPolicyLpmServiceHelper"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "PixelPlanet PdfPrinter-Monitor"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "CommonToolkitTray"
HKLM\...\StartupApproved\Run32: => "SWPROguard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe 2.1 PRO Full Crack.lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe Professional 2.1.0 Full(1).lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Power2GoExpress"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Infigo"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "BingSvc"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{107B701F-D6F2-4125-989D-013EBE4114C2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4756372F-1DBA-4E0D-88D4-10D9CBE588DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{701A95DF-EB9C-41A2-9DB7-7FCB240568EE}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C24A835C-861A-49D8-A2CC-9053C11552DB}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{A34F36B9-4BB2-40D4-BEAC-72D3B6A7D7B8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{DA8C5E14-1AF3-4680-8A78-32EA772C239B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{32FC1979-2D76-4947-8C75-8ED839D364EB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9DEDC08A-4AAD-4EFE-A264-D914813E7650}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{FDA1092F-154E-4FB1-B71A-84412016E944}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{DF970333-2791-4A78-B77A-7DFD953F58EA}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{650C856D-3797-48AE-B0EF-00F36AAF1043}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{1D872238-8039-4BF5-826A-5B4040368753}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{077BF549-8F4A-4C61-BE12-C4D9936F6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{69571B03-E475-4EAD-8620-E2BE564EB6AB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C6C0290D-DDE8-48B3-B84D-B3E8DC693DC3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{4DECD748-EF63-4CCC-BAC0-E39A79EEB77F}] => (Allow) LPort=8317
FirewallRules: [{00BE4382-D8C9-44D7-A3C3-A74A01E42A93}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{8842BE8D-197C-4EE5-9A67-8B063359D6D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{E26CC15F-1C7F-440C-9A34-6096EEF8893D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DEAC4C18-96F4-4E24-95F6-F605DA5C46FA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7015D2E8-D017-459F-BC17-45373052CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: High Definition Audio-Gerät
Description: High Definition Audio-Gerät
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HdAudAddService
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ScriptHelper.exe, Version 4.1.5.143 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1db0
Startzeit: 01d0d60e947912fc
Endzeit: 0
Anwendungspfad: C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe
Berichts-ID: 078a3f85-4202-11e5-82a1-54a050ae5ae6
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x8d8
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5
Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x980
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5
Error: (08/13/2015 10:08:03 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/13/2015 09:23:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1b6c
Startzeit: 01d0d51b04a4dd4b
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 30708c24-418c-11e5-829f-54a050ae5ae6
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GWXUX.exe, Version: 6.3.9600.17813, Zeitstempel: 0x554a15f3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f4336
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003d85e
ID des fehlerhaften Prozesses: 0x11f8
Startzeit der fehlerhaften Anwendung: 0xGWXUX.exe0
Pfad der fehlerhaften Anwendung: GWXUX.exe1
Pfad des fehlerhaften Moduls: GWXUX.exe2
Berichtskennung: GWXUX.exe3
Vollständiger Name des fehlerhaften Pakets: GWXUX.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: GWXUX.exe5
Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Name des fehlerhaften Moduls: ScriptHelper.exe, Version: 4.1.4.948, Zeitstempel: 0x5592bb4e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002bf58
ID des fehlerhaften Prozesses: 0x1184
Startzeit der fehlerhaften Anwendung: 0xScriptHelper.exe0
Pfad der fehlerhaften Anwendung: ScriptHelper.exe1
Pfad des fehlerhaften Moduls: ScriptHelper.exe2
Berichtskennung: ScriptHelper.exe3
Vollständiger Name des fehlerhaften Pakets: ScriptHelper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ScriptHelper.exe5
Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54dc4378
Name des fehlerhaften Moduls: alvupdt.dll, Version: 1.0.0.10, Zeitstempel: 0x5510b8fc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00016eb6
ID des fehlerhaften Prozesses: 0x34c
Startzeit der fehlerhaften Anwendung: 0xUpdateChecker.exe0
Pfad der fehlerhaften Anwendung: UpdateChecker.exe1
Pfad des fehlerhaften Moduls: UpdateChecker.exe2
Berichtskennung: UpdateChecker.exe3
Vollständiger Name des fehlerhaften Pakets: UpdateChecker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: UpdateChecker.exe5
Systemfehler:
=============
Error: (08/14/2015 05:26:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/14/2015 05:26:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Low Power Mode Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Critical Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Config TDP Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/14/2015 05:26:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Platform and Thermal Framework Processor Participant Service Application" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office:
=========================
Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927142
Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ScriptHelper.exe4.1.5.1431db001d0d60e947912fc0C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe078a3f85-4202-11e5-82a1-54a050ae5ae6
Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f68d801d0d600345e7d5eC:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll82a3dc7d-41f3-11e5-82a1-54a050ae5ae6
Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f698001d0d5ac1a3d7764C:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll5c0f06fc-419f-11e5-82a0-54a050ae5ae6
Error: (08/13/2015 10:08:03 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/13/2015 09:23:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.209111b6c01d0d51b04a4dd4b4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe30708c24-418c-11e5-829f-54a050ae5ae6microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (08/06/2015 06:52:42 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/06/2015 02:14:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GWXUX.exe6.3.9600.17813554a15f3ntdll.dll6.3.9600.17736550f4336c0000005000000000003d85e11f801d0d041801d9aabC:\Windows\System32\GWX\GWXUX.exeC:\Windows\SYSTEM32\ntdll.dllbfd9159a-3c34-11e5-829e-54a050ae5ae6
Error: (07/25/2015 08:14:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ScriptHelper.exe4.1.4.9485592bb4eScriptHelper.exe4.1.4.9485592bb4ec00000050002bf58118401d0c705b5769044C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exeC:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.7.0\ScriptHelper.exef54cd6ec-32f8-11e5-829d-54a050ae5ae6
Error: (07/25/2015 07:13:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: UpdateChecker.exe0.0.0.054dc4378alvupdt.dll1.0.0.105510b8fcc000000500016eb634c01d0be8898fb42ceC:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exeC:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll8167e08d-32f0-11e5-829d-54a050ae5ae6
CodeIntegrity:
===================================
Date: 2015-08-13 22:29:01.226
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 20:43:49.737
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-14 21:18:19.693
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-04 15:39:01.005
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-04 15:05:01.032
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-25 17:57:13.618
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-21 16:02:51.020
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-19 17:02:04.404
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-19 15:55:58.598
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-13 18:51:57.167
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 17%
Installierter physikalischer RAM: 8075.27 MB
Verfügbarer physikalischer RAM: 6692.03 MB
Summe virtueller Speicher: 9355.27 MB
Verfügbarer virtueller Speicher: 7979.89 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:306.51 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.62 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 3483A440)
Partition: GPT.
==================== Ende von Ergebnis ============================
|
|
15.08.2015, 09:52
| #9 |
| /// the machine /// TB-Ausbilder | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen)ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.08.2015, 13:10
| #10 |
| | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Nein, alle Probleme weg. Fantastisch! Danke!!  ESET/ log.txt Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=49843758b4771b47a4adc397b1e6122b
# end=init
# utc_time=2015-08-15 09:58:01
# local_time=2015-08-15 11:58:01 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 25289
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=49843758b4771b47a4adc397b1e6122b
# end=updated
# utc_time=2015-08-15 10:01:08
# local_time=2015-08-15 12:01:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=49843758b4771b47a4adc397b1e6122b
# engine=25289
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-08-15 11:23:47
# local_time=2015-08-15 01:23:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='McAfee Anti-Virus and Anti-Spyware'
# compatibility_mode=5122 16777214 66 62 24253159 66882113 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 76270 3427397 0 0
# scanned=276358
# found=21
# cleaned=0
# scan_time=4958
sh=C388C92E15C7DCB2F5B45307CD648DEE791D655E ft=1 fh=3bea13f6124cd671 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R131J7D.exe"
sh=8066ABC1B8881F376BD25A0B48707308F4CBE226 ft=1 fh=d16f19749fff4b2b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$R33D3EG.exe"
sh=08131ADF7C15E801A902E72ADA9DBA8EF81AD101 ft=1 fh=0e19461b6ef503f8 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RK86MUT.exe"
sh=749B1D6251254E564F7053514A9702EDBDD8F355 ft=1 fh=9dd9c3b39db0cff1 vn="Win64/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\chromext64.dll"
sh=85F18CC63AC304675FA721F9615529F6D6D2BB37 ft=1 fh=873d229cea4aad3e vn="Win64/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\hlpr64.exe"
sh=B4F79E8F443904CD3CFD136B467BD0747F63AF1B ft=1 fh=c71c0011f598f3ae vn="Win32/Toolbar.Montiera.AA evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\niOkdJk1.dll"
sh=07A10DA2DCAC72FF3D8F351CBA70BBC376DB7943 ft=1 fh=c71c001179dde76e vn="Variante von Win32/Toolbar.Montiera.Y evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\Pgimngnk.dll"
sh=E6C12BAF802645C892778036ABBB02A97C9617C0 ft=1 fh=8b6ff701d7b4f813 vn="Variante von Win32/Toolbar.Montiera.AE evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RC8TOZ5.2\downloads\newVrsn.exe"
sh=4CF9EF4D739C2F8A1F3909A2720274527EC29E1F ft=1 fh=c71c001143f2d9bd vn="Variante von Win32/ELEX.CP evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-2923131921-1963989444-91532992-1001\$RQ4F296\UninstallManager.exe"
sh=06AEEE97A8E40D82E97A0945E61C9EF1C0E7DDE7 ft=1 fh=8c61c410b53542e1 vn="Variante von Win32/SlowPCfighter.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Selina\AppData\Roaming\Fighters\Tray\AutoInstall\DM.exe.vir"
sh=06AEEE97A8E40D82E97A0945E61C9EF1C0E7DDE7 ft=1 fh=8c61c410b53542e1 vn="Variante von Win32/SlowPCfighter.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Selina\AppData\Roaming\Fighters\Tray\Updates\TKTRAY-DM\DM.exe.vir"
sh=92314BAF1F51EDC490E6A4E7CDB007EC4F9C26A8 ft=0 fh=0000000000000000 vn="Win32/Toolbar.TNT2.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C"
sh=D9995018BDE42788979278B773D8CD23FD3450B4 ft=1 fh=49e05e3cdc9dd7c3 vn="Variante von Win32/OptimizerEliteMax.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\optprosetup.exe"
sh=705E50A9C0CF91A10DDF2AF8179FDA4EEE9EF65B ft=1 fh=c71c001109968fb9 vn="Variante von Win32/Adware.MultiPlug.LI Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz"
sh=EEC1979AE8F7A6F4F1F9B85E7380E777E687613A ft=1 fh=77287e3fce6a6904 vn="MSIL/MyPCBackup.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp"
sh=25BB895121015E5AA74C6B91E5848C6E067DB283 ft=1 fh=c71c00113729331f vn="Variante von Win32/Adware.MultiPlug.LI Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz"
sh=4E5E8B54DDA603D7E83F3EDE2BCDD8064D4EDF22 ft=1 fh=895bb0fee970ac49 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe"
sh=FE44754A5BB31CFFA64D0C0E5ACA8E3A592FB396 ft=1 fh=75d9014c39501564 vn="Variante von Win32/AdWare.SpeedingUpMyPC.N Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe"
sh=D3E60E30EFB1525CEF3A1D375D1124556C0D96CC ft=1 fh=1ba5cde6a47fc5cd vn="Win32/ELEX.CK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe"
sh=24F2D80708A35F88188D52FFDD81FC0A71C7D6C9 ft=1 fh=6ec999985f609117 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe"
sh=91F90B8E11C9E29B0B39C2CFAF0BE54A01F8B96C ft=1 fh=6592c8a43b708321 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe"
Code:
ATTFilter Results of screen317's Security Check version 1.006 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` TuneUp Utilities 2014 (de-DE) Adobe Flash Player 18.0.0.232 Mozilla Firefox 38.0.5 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015 durchgeführt von Selina (Administrator) auf SUNRISE (15-08-2015 14:01:54) Gestartet von C:\Users\Selina\Desktop Geladene Profile: Selina (Verfügbare Profile: Selina & Anja) Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser nicht gefunden!) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (hxxp://www.aobo-porn-filter.com) C:\Windows\SysWOW64\drivers\sysfilter\sysfilter.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-20] (NVIDIA Corporation) HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [1080992 2014-05-15] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\ASUSWSLoader.exe [63296 2014-02-25] () HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.) HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [3786880 2013-07-12] (PixelPlanet) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [AoboAutoRun32] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock.dll",OK HKLM\...\Policies\Explorer\Run: [AoboAutoRun64] => rundll32.exe "C:\Windows\SysWOW64\drivers\sysfilter\WinSock64.dll",OK HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Run: [BingSvc] => C:\Users\Selina\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-04-07] (© 2015 Microsoft Corporation) HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app\37.1329.15.30" - (Der Dateneintrag hat 107 mehr Zeichen). IFEO: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" IFEO\fighterlauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-10] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe 2.1 PRO Full Crack.lnk [2015-04-15] ShortcutTarget: Sparkol VideoScribe 2.1 PRO Full Crack.lnk -> C:\ProgramData\{bdf56971-599d-e834-bdf5-56971599a5c5}\Sparkol VideoScribe 2.1 PRO Full Crack.exe (Keine Datei) Startup: C:\Users\Selina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sparkol VideoScribe Professional 2.1.0 Full(1).lnk [2015-04-15] ShortcutTarget: Sparkol VideoScribe Professional 2.1.0 Full(1).lnk -> C:\ProgramData\{1de678b8-9deb-0e0c-1de6-678b89dee2e2}\Sparkol VideoScribe Professional 2.1.0 Full(1).exe (Keine Datei) ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.2.301\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-AT&Src=WD8&Tid=000328B0&OHP=http%3A%2F%2Fwww.delta%2Dhomes.com%2F%3Ftype%3Dhp%26ts%3D1431679656%26z%3D4f6311eef8cee01913252d6g3z9c4g9q2mbt7qew4z%26from%3Dwpm05153%26uid%3DST1000LM024XHN%2DM101MBB%5FS32XJ9DF708772&OSP=http%3A%2F%2Fdo%2Dsearch.com%2Fweb%2F%3Futm%5Fsource%3Db%26utm%5Fmedium%3D%26utm%5Fcampaign%3Dinstall%5Fie%26utm%5Fcontent%3Dds%26from%3D%26uid%3DST500DM002%2D1BC142%5FW2A27G6AXXXXW2A27G6A%26ts%3D1420373293%26type%3Ddefault%26q%3D%7BsearchTerms%7D SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: SalePlus -> {0d5b8aad-5e9d-46bd-a6a9-b98c883b23f4} -> C:\Program Files (x86)\SalePlus\kJEzufod2hPs3c.x64.dll Keine Datei BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation) BHO: SalePlus -> {ba254a32-0efe-4ce1-9c79-f2ba7a1490f7} -> C:\Program Files (x86)\SalePlus\VUJpPdpWzowSHb.x64.dll Keine Datei BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2014-09-04] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2014-09-04] (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{517FD05F-0702-4F6F-BB2C-247A2CEFCC94}: [DhcpNameServer] 192.168.8.1 192.168.8.1 StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default FF SearchEngineOrder.3: Bing FF Homepage: hxxp://www.google.at/ FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-13] () FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2014-09-04] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-13] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2014-09-04] () FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-05-22] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-22] (Microsoft Corporation) FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-images.xml [2015-07-04] FF SearchPlugin: C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\searchplugins\google-maps.xml [2015-07-04] FF Extension: Bing Search - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\bingsearch.full@microsoft.com [2015-05-14] FF Extension: Cliqz - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\cliqz@cliqz.com.xpi [2015-07-25] FF Extension: Adblock Plus - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-14] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-31] FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] FF HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Selina\AppData\Roaming\Mozilla\Firefox\Profiles\8cmuviq6.default\extensions\cliqz@cliqz.com Chrome: ======= CHR Profile: C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-05] CHR Extension: (YouTube) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-05] CHR Extension: (Google Search) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-05] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-13] CHR Extension: (Google Wallet) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-05] CHR Extension: (Gmail) - C:\Users\Selina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-05] StartMenuInternet: Google Chrome - Chrome.exe ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.2.301\AsusWSWinService.exe [71680 2014-02-25] (ASUS Cloud Corporation) [Datei ist nicht signiert] S4 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2014-02-10] (Preventon Technologies Limited) S4 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2014-02-10] (Preventon Technologies Limited) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation) R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation) R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation) R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.) S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.) S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-20] (NVIDIA Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [71952 2014-03-31] (ASUS Corporation) S3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2014-02-10] () R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.) R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation) R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation) R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation) R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-15] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.) R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-12] (Realsil Semiconductor Corporation) S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X] U0 msahci; system32\drivers\msahci.sys [X] U3 NPF; kein ImagePath S2 plctrl; \??\C:\Program Files\ASUS\P4G\plctrl.sys [X] S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-15 14:01 - 2015-08-15 14:02 - 00023007 _____ C:\Users\Selina\Desktop\FRST.txt 2015-08-15 13:57 - 2015-08-15 13:57 - 00852684 _____ C:\Users\Selina\Downloads\SecurityCheck.exe 2015-08-15 11:57 - 2015-08-15 11:57 - 02870984 _____ (ESET) C:\Users\Selina\Downloads\esetsmartinstaller_deu.exe 2015-08-14 19:16 - 2015-08-14 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2015-08-14 18:15 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-14 18:15 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-08-14 18:15 - 2015-07-19 03:58 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-08-14 18:15 - 2015-07-18 20:51 - 03704320 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-08-14 18:15 - 2015-07-18 20:31 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-08-14 18:15 - 2015-07-18 20:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-08-14 18:15 - 2015-07-18 20:31 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-08-14 18:15 - 2015-07-18 20:29 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-08-14 18:15 - 2015-07-18 20:29 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-08-14 18:15 - 2015-07-18 20:29 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-08-14 18:15 - 2015-07-18 20:28 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-08-14 18:15 - 2015-07-18 20:12 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-08-14 18:15 - 2015-07-18 20:10 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-08-14 18:15 - 2015-07-18 20:09 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-08-14 18:15 - 2015-06-09 20:27 - 00411133 _____ C:\Windows\system32\ApnDatabase.xml 2015-08-14 17:38 - 2015-08-14 17:38 - 00032440 _____ C:\Users\Selina\Desktop\Addition2.txt 2015-08-14 17:37 - 2015-08-14 17:38 - 00047690 _____ C:\Users\Selina\Desktop\FRST2.txt 2015-08-14 17:32 - 2015-08-14 17:36 - 00003171 _____ C:\Users\Selina\Desktop\JRT.txt 2015-08-14 17:23 - 2015-08-14 17:23 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Selina\Downloads\JRT.exe 2015-08-14 17:20 - 2015-08-14 17:20 - 00013102 _____ C:\Users\Selina\Desktop\AdwCleaner[S0].txt 2015-08-14 17:13 - 2015-08-14 17:16 - 00000000 ____D C:\AdwCleaner 2015-08-14 17:12 - 2015-08-14 17:12 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe 2015-08-14 15:56 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-08-14 15:56 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-08-14 15:56 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-08-14 15:56 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-08-14 15:56 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-08-14 15:56 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-08-14 15:56 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-08-14 15:56 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-08-14 15:56 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-08-14 15:56 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-08-14 15:56 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-08-14 15:56 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-08-14 15:56 - 2015-07-16 21:45 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-08-14 15:56 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-08-14 15:56 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-08-14 15:56 - 2015-07-16 21:38 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-08-14 15:56 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-08-14 15:56 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-08-14 15:56 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-08-14 15:56 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-08-14 15:56 - 2015-07-16 21:13 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-08-14 15:56 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-08-14 15:56 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-08-14 15:56 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-08-14 15:56 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-08-14 15:56 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-08-14 15:56 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll 2015-08-14 15:56 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-08-14 15:56 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-08-14 15:56 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-08-14 15:56 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-08-14 15:55 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-08-14 15:55 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-08-14 15:55 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2015-08-14 15:55 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-08-14 15:55 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2015-08-14 15:53 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2015-08-14 15:53 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2015-08-14 15:52 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2015-08-14 15:52 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys 2015-08-14 15:52 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2015-08-14 15:51 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-08-14 15:51 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2015-08-14 15:51 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2015-08-14 15:51 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2015-08-14 15:50 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2015-08-14 15:50 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-08-14 15:50 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-08-14 15:50 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-08-14 15:50 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-08-14 15:50 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-08-14 15:50 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-08-14 15:48 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-08-14 15:48 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2015-08-14 15:47 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-08-14 15:47 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-08-14 15:47 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe 2015-08-14 15:47 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\Windows\notepad.exe 2015-08-14 15:47 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe 2015-08-14 15:46 - 2015-07-14 05:22 - 02529880 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-08-14 15:46 - 2015-07-14 05:21 - 01901776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2015-08-14 15:46 - 2015-07-10 19:42 - 02345472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-08-14 15:46 - 2015-07-10 18:47 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-08-14 15:46 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-08-14 15:46 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-08-14 15:46 - 2015-05-12 02:24 - 00536920 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2015-08-14 15:45 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-08-14 15:45 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-08-14 15:45 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-08-14 15:45 - 2015-07-24 20:57 - 04177408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-08-14 15:45 - 2015-07-24 20:57 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-08-14 15:45 - 2015-07-24 20:52 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-08-14 15:45 - 2015-07-24 19:27 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-08-14 15:45 - 2015-07-24 19:23 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-08-14 15:45 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-08-14 15:45 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2015-08-14 15:45 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-08-14 15:45 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2015-08-14 00:16 - 2015-08-14 00:16 - 00000032 _____ C:\ProgramData\Temp.log 2015-08-13 23:04 - 2015-08-13 23:04 - 02248704 _____ C:\Users\Selina\Downloads\AdwCleaner_4.208.exe.part 2015-08-13 23:03 - 2015-08-13 23:03 - 02173952 _____ (Farbar) C:\Users\Selina\Downloads\FRST64(1).exe 2015-08-13 22:58 - 2015-08-13 22:58 - 00000000 ____D C:\Users\Selina\Desktop\FRST-OlderVersion 2015-08-13 22:05 - 2015-08-13 22:05 - 00120116 _____ C:\Users\Selina\Desktop\mbam.txt 2015-08-13 10:12 - 2015-08-15 11:45 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-13 10:12 - 2015-08-13 10:12 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-13 10:12 - 2015-08-13 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-13 10:11 - 2015-08-13 10:12 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-08-13 10:11 - 2015-08-13 10:11 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-08-13 10:11 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-08-13 10:11 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-08-13 10:11 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-08-13 10:07 - 2015-08-13 10:07 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Selina\Downloads\mbam-setup-2.1.8.1057.exe 2015-08-13 09:35 - 2015-08-13 09:35 - 00000750 _____ C:\Users\Selina\Desktop\Revo Uninstaller.lnk 2015-08-13 09:34 - 2015-08-13 09:34 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Selina\Downloads\revosetup95.exe 2015-08-12 13:51 - 2015-08-12 13:51 - 00055142 _____ C:\Users\Selina\Desktop\FRST1.txt 2015-08-12 13:51 - 2015-08-12 13:51 - 00041332 _____ C:\Users\Selina\Desktop\Addition1.txt 2015-08-12 11:31 - 2015-08-15 14:01 - 00000000 ____D C:\FRST 2015-08-12 11:30 - 2015-08-13 22:58 - 02173952 _____ (Farbar) C:\Users\Selina\Desktop\FRST64.exe 2015-08-05 20:25 - 2015-08-06 21:44 - 00000000 ____D C:\Users\Selina\Desktop\Youtube channel 2015-07-25 19:44 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-07-25 19:44 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-07-25 19:44 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-07-25 19:44 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-07-25 19:42 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll 2015-07-25 19:38 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-07-25 19:38 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-07-25 19:38 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-07-25 19:38 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-07-25 19:38 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2015-07-25 19:38 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-07-25 19:38 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-07-25 19:38 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-07-25 19:38 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-07-25 19:38 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-07-25 19:38 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-07-25 19:38 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-07-25 19:38 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-07-25 19:35 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2015-07-25 19:35 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2015-07-25 19:35 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-07-25 19:32 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-07-25 19:30 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-07-25 19:30 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-07-25 19:30 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe 2015-07-25 19:30 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2015-07-25 19:30 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-07-25 19:30 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2015-07-25 19:28 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll 2015-07-25 19:28 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll 2015-07-25 19:26 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-07-25 19:26 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-07-25 19:26 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2015-07-25 19:26 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2015-07-25 19:23 - 2015-05-11 20:17 - 01201664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2015-07-25 19:22 - 2014-11-04 21:25 - 00059712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys 2015-07-25 19:22 - 2014-11-04 21:25 - 00051008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys 2015-07-25 19:22 - 2014-11-04 08:55 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys 2015-07-25 19:22 - 2014-11-04 08:54 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys 2015-07-25 19:22 - 2014-11-04 08:54 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2015-07-25 19:22 - 2014-11-04 08:54 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys 2015-07-25 19:20 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2015-07-25 19:18 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-07-25 19:16 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-25 19:16 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-25 19:16 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2015-07-25 19:16 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-15 14:00 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru 2015-08-15 13:31 - 2014-07-31 19:27 - 01610674 _____ C:\Windows\WindowsUpdate.log 2015-08-15 12:00 - 2014-05-16 01:45 - 00773008 _____ C:\Windows\system32\perfh007.dat 2015-08-15 12:00 - 2014-05-16 01:45 - 00162310 _____ C:\Windows\system32\perfc007.dat 2015-08-15 12:00 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-15 11:55 - 2013-08-22 16:46 - 00099232 _____ C:\Windows\setupact.log 2015-08-15 11:49 - 2014-09-30 03:49 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{924A399C-D8A5-42C9-8053-6DBF492001E4} 2015-08-14 19:35 - 2015-06-10 19:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-08-14 19:20 - 2014-09-30 03:18 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2923131921-1963989444-91532992-1001 2015-08-14 19:10 - 2014-09-30 03:13 - 00000000 __RDO C:\Users\Selina\OneDrive 2015-08-14 19:09 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-14 19:08 - 2014-09-30 02:28 - 00000000 ____D C:\Users\Selina\AppData\Local\ASUS 2015-08-14 19:08 - 2014-05-15 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2015-08-14 19:08 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\en-GB 2015-08-14 18:17 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2015-08-14 17:11 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2015-08-14 16:51 - 2015-03-26 23:57 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2014 2015-08-14 16:51 - 2014-03-18 10:16 - 00191386 _____ C:\Windows\PFRO.log 2015-08-14 16:48 - 2014-05-15 17:58 - 00000000 ____D C:\Program Files (x86)\ASUS 2015-08-14 16:22 - 2014-07-31 19:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-08-14 16:17 - 2015-04-10 18:56 - 00000000 ___SD C:\Windows\system32\GWX 2015-08-14 16:15 - 2015-05-05 08:22 - 00000435 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2015-08-14 16:15 - 2013-08-22 16:44 - 00485720 _____ C:\Windows\system32\FNTCACHE.DAT 2015-08-14 16:12 - 2015-04-10 18:57 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-08-14 16:12 - 2014-12-28 01:09 - 00000000 ____D C:\Windows\system32\appraiser 2015-08-14 16:12 - 2014-10-10 16:01 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\WinStore 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender 2015-08-14 16:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2015-08-14 16:10 - 2014-10-20 18:24 - 00000000 ____D C:\Windows\system32\MRT 2015-08-14 16:02 - 2014-10-20 18:24 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-08-14 15:56 - 2015-03-27 00:00 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Skype 2015-08-14 15:52 - 2014-09-30 03:42 - 00000000 ____D C:\Users\Selina\AppData\Roaming\WildTangent 2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-08-14 15:52 - 2014-05-15 17:59 - 00000000 ____D C:\ProgramData\WildTangent 2015-08-14 00:19 - 2014-10-05 10:48 - 00000000 ____D C:\ProgramData\CLSK 2015-08-13 23:45 - 2015-07-04 13:14 - 00000000 ____D C:\Users\Selina\AppData\Roaming\Ethereal 2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieUserList 2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieSiteList 2015-08-13 23:25 - 2015-03-29 23:06 - 00000000 __SHD C:\Users\Selina\AppData\Local\EmieBrowserModeList 2015-08-13 23:25 - 2014-10-05 10:06 - 00000000 ____D C:\Program Files (x86)\Google 2015-08-13 23:24 - 2015-04-08 00:00 - 00000000 ____D C:\Program Files (x86)\TechSmith 2015-08-13 23:21 - 2014-12-26 19:39 - 00000000 ____D C:\Users\Selina\AppData\Roaming\DVDVideoSoft 2015-08-13 23:17 - 2015-03-27 00:00 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-08-13 11:40 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2015-08-13 11:38 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PLA 2015-08-13 11:38 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI 2015-08-13 09:45 - 2014-12-31 23:49 - 00026624 ___SH C:\Users\Selina\Documents\Thumbs.db 2015-08-13 09:35 - 2015-06-10 19:03 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-08-13 09:23 - 2014-09-30 02:27 - 00000000 ____D C:\Users\Selina\AppData\Local\Packages 2015-08-12 14:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2015-08-11 14:51 - 2014-07-31 19:50 - 00000000 ____D C:\Program Files (x86)\McAfee 2015-08-08 15:55 - 2015-05-17 12:53 - 00794088 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-08-08 15:55 - 2015-05-17 12:53 - 00179688 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-08-06 14:20 - 2014-07-31 19:50 - 00000000 ____D C:\ProgramData\McAfee 2015-08-06 14:14 - 2015-05-18 22:08 - 00000000 ____D C:\Users\Selina\AppData\Local\CrashDumps 2015-08-05 20:03 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF 2015-07-26 15:51 - 2015-04-23 23:31 - 00000000 ____D C:\Users\Selina\Desktop\USB Stick 2015-07-26 11:37 - 2014-09-30 22:28 - 00000000 ____D C:\Program Files\Microsoft Office 15 2015-07-25 19:18 - 2015-06-17 08:02 - 00000000 ____D C:\Program Files\Common Files\AV ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-03-18 19:08 - 2015-03-29 15:42 - 0000020 _____ () C:\Users\Selina\AppData\Local\appdataFr3.bin 2014-07-31 19:41 - 2014-07-31 19:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-03-14 14:02 - 2015-03-14 14:02 - 0000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2014-05-15 17:58 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd 2014-05-15 17:58 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe 2014-05-15 17:58 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS 2015-08-14 00:16 - 2015-08-14 00:16 - 0000032 _____ () C:\ProgramData\Temp.log 2014-10-05 10:49 - 2014-10-05 10:51 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2014-10-05 10:48 - 2014-10-05 10:49 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\ProgramData\SetStretch.VBS Einige Dateien in TEMP: ==================== C:\Users\Selina\AppData\Local\Temp\BSvcProcessor.exe C:\Users\Selina\AppData\Local\Temp\BSvcUpdater.exe C:\Users\Selina\AppData\Local\Temp\JMC_WM.exe C:\Users\Selina\AppData\Local\Temp\oi_{B8811E58-D5AA-4DBA-9149-2F98DB59161D}.exe C:\Users\Selina\AppData\Local\Temp\optprosetup.exe C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdrv7.dll C:\Users\Selina\AppData\Local\Temp\PixelPlanetpdui7.dll C:\Users\Selina\AppData\Local\Temp\Quarantine.exe C:\Users\Selina\AppData\Local\Temp\regini.exe C:\Users\Selina\AppData\Local\Temp\ReimagePackage.exe C:\Users\Selina\AppData\Local\Temp\ReiSysUpdate.exe C:\Users\Selina\AppData\Local\Temp\SetupProPlusRetail.x86.de-DE_ProPlusRetail_36PJN-VMKQD-9PCVW-VW84P-D67T3_act_1_.exe C:\Users\Selina\AppData\Local\Temp\SkypeSetup.exe C:\Users\Selina\AppData\Local\Temp\sqlite3.dll C:\Users\Selina\AppData\Local\Temp\sqlite3.exe C:\Users\Selina\AppData\Local\Temp\UNINSTALL.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-08-05 20:40 ==================== Ende von Ergebnis ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Selina (2015-08-15 14:02:35)
Gestartet von C:\Users\Selina\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2923131921-1963989444-91532992-500 - Administrator - Disabled)
Anja (S-1-5-21-2923131921-1963989444-91532992-1005 - Limited - Enabled) => C:\Users\Anja
Gast (S-1-5-21-2923131921-1963989444-91532992-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2923131921-1963989444-91532992-1003 - Limited - Enabled)
Selina (S-1-5-21-2923131921-1963989444-91532992-1001 - Administrator - Enabled) => C:\Users\Selina
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.0 - CLIQZ.com)
Fighters (x32 Version: 4.5.146 - SPAMFIGHTER ApS) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{2DCD52EE-1AE1-4128-9819-A79F7D09B6B3}) (Version: 7.0.1.1 - MAGIX AG)
MAGIX Foto Designer 7 (Version: 7.0.1.1 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
NVIDIA Graphics Driver 332.85 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.85 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
PixelPlanet PdfPrinter 7 (64bit) (HKLM\...\{000F58F3-A544-4BB5-AF1B-761EA1C8595C}) (Version: 7.0.60 - PixelPlanet)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Sparkol VideoScribe (HKLM-x32\...\Sparkol VideoScribe 2.2.81) (Version: 2.2.81 - Sparkol)
Sparkol VideoScribe (x32 Version: 2.2.81 - Sparkol) Hidden
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Watchtower Library 2012 - Deutsch (HKLM-x32\...\{CFDF0961-77C7-4392-96EE-624DFE81C3C2}) (Version: 14.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.2.301 - ASUS Cloud Corporation)
Windows-Treiberpaket - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2923131921-1963989444-91532992-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> "C:\Windows\system32\igfxEM.exe" Keine Datei
==================== Wiederherstellungspunkte =========================
13-08-2015 23:09:56 Revo Uninstaller's restore point - McAfee LiveSafe – Internet Security
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {02554177-D27A-4093-8467-1296F3541CFE} - \Yahoo! Search -> Keine Datei <==== ACHTUNG
Task: {1C092132-88FB-41DC-8364-824E30BFAD4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {1D77BDEF-A383-44E5-A8D5-3CF4D8699796} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-05-12] (Microsoft Corporation)
Task: {2761783C-2564-4D71-BD14-08A3EF337853} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-13] (Adobe Systems Incorporated)
Task: {2E93A9E0-3BEC-496C-9434-8021BDF4962C} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - \Yahoo! Search Updater -> Keine Datei <==== ACHTUNG
Task: {555E4B6D-40E1-43F1-B4F2-DC65CB4FC170} - System32\Tasks\{D4ED4DD4-E6F7-407F-8C09-B3EAACAFCBA5} => pcalua.exe -a C:\Users\Selina\AppData\Roaming\vi-view\UninstallManager.exe -c -ptid=cor
Task: {649DAAEE-F738-41E9-9EF5-F4669CF3A588} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {744CE80B-F1BF-4F2E-8B11-8BB8381A7604} - System32\Tasks\{86E86F40-51C2-4AB3-87B4-A0C0DF4F4D34} => pcalua.exe -a "C:\Program Files (x86)\Intel\Intel(R) Dynamic Platform and Thermal Framework\Uninstall\setup.exe" -c -uninstall
Task: {945D81A6-4C2B-4F64-BF0A-E2ECDCC9FA81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {EA858E9F-4743-42FC-BD69-BD3A731EEF91} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {FD4022ED-7434-4DD9-B0AF-4BEA35891F08} - System32\Tasks\Opera scheduled Autoupdate 1419616129 => C:\Program Files (x86)\Opera\launcher.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-07-31 19:38 - 2014-03-13 21:26 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-30 22:28 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-07-31 19:33 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Selina\OneDrive:ms-properties
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Selina\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "simplicheck.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "DptfPolicyLpmServiceHelper"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run32: => "CLMLServer"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "PixelPlanet PdfPrinter-Monitor"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "CommonToolkitTray"
HKLM\...\StartupApproved\Run32: => "SWPROguard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe 2.1 PRO Full Crack.lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\StartupFolder: => "Sparkol VideoScribe Professional 2.1.0 Full(1).lnk"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Yahoo! Search"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Power2GoExpress"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Infigo"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-2923131921-1963989444-91532992-1001\...\StartupApproved\Run: => "BingSvc"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{107B701F-D6F2-4125-989D-013EBE4114C2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4756372F-1DBA-4E0D-88D4-10D9CBE588DE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{701A95DF-EB9C-41A2-9DB7-7FCB240568EE}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C24A835C-861A-49D8-A2CC-9053C11552DB}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{A34F36B9-4BB2-40D4-BEAC-72D3B6A7D7B8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{DA8C5E14-1AF3-4680-8A78-32EA772C239B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{32FC1979-2D76-4947-8C75-8ED839D364EB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{9DEDC08A-4AAD-4EFE-A264-D914813E7650}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{FDA1092F-154E-4FB1-B71A-84412016E944}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{DF970333-2791-4A78-B77A-7DFD953F58EA}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{650C856D-3797-48AE-B0EF-00F36AAF1043}] => (Allow) C:\Program Files (x86)\Faster Light\bin\FasterLight.BRT.Helper.exe
FirewallRules: [{1D872238-8039-4BF5-826A-5B4040368753}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{077BF549-8F4A-4C61-BE12-C4D9936F6F7C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{69571B03-E475-4EAD-8620-E2BE564EB6AB}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{C6C0290D-DDE8-48B3-B84D-B3E8DC693DC3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{4DECD748-EF63-4CCC-BAC0-E39A79EEB77F}] => (Allow) LPort=8317
FirewallRules: [{00BE4382-D8C9-44D7-A3C3-A74A01E42A93}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{8842BE8D-197C-4EE5-9A67-8B063359D6D7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{E26CC15F-1C7F-440C-9A34-6096EEF8893D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DEAC4C18-96F4-4E24-95F6-F605DA5C46FA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{7015D2E8-D017-459F-BC17-45373052CDDC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/15/2015 01:53:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (08/15/2015 12:47:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/15/2015 11:57:39 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (08/15/2015 11:57:36 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ScriptHelper.exe, Version 4.1.5.143 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1db0
Startzeit: 01d0d60e947912fc
Endzeit: 0
Anwendungspfad: C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe
Berichts-ID: 078a3f85-4202-11e5-82a1-54a050ae5ae6
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x8d8
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5
Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FighterSuiteService.exe, Version: 3.1.291.0, Zeitstempel: 0x5456a937
Name des fehlerhaften Moduls: MachineIdGateway.dll, Version: 1.0.13.0, Zeitstempel: 0x4f966d0c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000026f6
ID des fehlerhaften Prozesses: 0x980
Startzeit der fehlerhaften Anwendung: 0xFighterSuiteService.exe0
Pfad der fehlerhaften Anwendung: FighterSuiteService.exe1
Pfad des fehlerhaften Moduls: FighterSuiteService.exe2
Berichtskennung: FighterSuiteService.exe3
Vollständiger Name des fehlerhaften Pakets: FighterSuiteService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FighterSuiteService.exe5
Systemfehler:
=============
Error: (08/15/2015 11:59:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/15/2015 11:59:11 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Selina\AppData\Local\Temp\ehdrv.sys
Error: (08/15/2015 11:59:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/15/2015 11:59:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Selina\AppData\Local\Temp\ehdrv.sys
Error: (08/15/2015 11:59:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (08/15/2015 11:59:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Selina\AppData\Local\Temp\ehdrv.sys
Error: (08/14/2015 07:47:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (08/14/2015 07:09:38 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:
Error: (08/14/2015 07:09:38 PM) (Source: ipnathlp) (EventID: 1233) (User: )
Description:
Error: (08/14/2015 07:09:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "TuneUp Utilities Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Microsoft Office:
=========================
Error: (08/15/2015 01:53:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (08/15/2015 12:47:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (08/15/2015 11:57:39 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe
Error: (08/15/2015 11:57:36 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe
Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe
Error: (08/15/2015 11:57:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestC:\Users\Selina\Downloads\esetsmartinstaller_deu.exe
Error: (08/14/2015 03:57:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SUNRISE)
Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927142
Error: (08/13/2015 11:27:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ScriptHelper.exe4.1.5.1431db001d0d60e947912fc0C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.8.0\ScriptHelper.exe078a3f85-4202-11e5-82a1-54a050ae5ae6
Error: (08/13/2015 09:43:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f68d801d0d600345e7d5eC:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll82a3dc7d-41f3-11e5-82a1-54a050ae5ae6
Error: (08/13/2015 11:40:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: FighterSuiteService.exe3.1.291.05456a937MachineIdGateway.dll1.0.13.04f966d0cc0000005000026f698001d0d5ac1a3d7764C:\Program Files (x86)\Fighters\FighterSuiteService.exeC:\Program Files (x86)\Fighters\MachineIdGateway.dll5c0f06fc-419f-11e5-82a0-54a050ae5ae6
CodeIntegrity:
===================================
Date: 2015-08-13 22:29:01.226
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-08-05 20:43:49.737
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-14 21:18:19.693
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-04 15:39:01.005
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-07-04 15:05:01.032
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-25 17:57:13.618
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-21 16:02:51.020
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-03-19 17:02:04.404
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-19 15:55:58.598
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume4\Windows\SysWOW64\drivers\sysfilter\sysWebFilter64.dll that did not meet the Windows signing level requirements.
Date: 2015-03-13 18:51:57.167
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 8075.27 MB
Verfügbarer physikalischer RAM: 5166.18 MB
Summe virtueller Speicher: 9355.27 MB
Verfügbarer virtueller Speicher: 6382.87 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:305.95 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.62 GB) NTFS
Drive f: () (Removable) (Total:3.72 GB) (Free:3.58 GB) FAT32
Drive g: (INTENSO) (Removable) (Total:14.83 GB) (Free:14.83 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 3483A440)
Partition: GPT.
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 6D2B7FB9)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 14.8 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=14.8 GB) - (Type=0C)
==================== Ende von Ergebnis ============================
|
|
16.08.2015, 06:28
| #11 |
| /// the machine /// TB-Ausbilder | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Papierkorb leeren. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz
C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp
C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz
C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe
C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe
C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe
C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe
Task: {02554177-D27A-4093-8467-1296F3541CFE} - \Yahoo! Search -> Keine Datei <==== ACHTUNG
Task: {3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} - \Yahoo! Search Updater -> Keine Datei <==== ACHTUNG
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Cleanup: (Die Reihenfolge ist hier entscheidend) Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken. Falls Combofix verwendet wurde:  Combofix deinstallieren .
Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.   Absicherung:Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. Meine Empfehlung:  Emsisoft Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner . Abschließend noch ein paar grundsätzliche Bemerkungen: Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems. Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.08.2015, 22:57
| #12 |
| | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Danke für die großartige Hilfe schrauber! So, Papierkorb ist leer und da ist noch das Fixlog Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:17-08-2015
durchgeführt von Selina (2015-08-17 23:19:32) Run:1
Gestartet von C:\Users\Selina\Desktop
Geladene Profile: Selina (Verfügbare Profile: Selina & Anja & mama)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C
C:\Users\Selina\AppData\Local\Temp\optprosetup.exe
C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz
C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp
C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz
C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe
C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe
C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe
C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe
Emptytemp:
*****************
"C:\Users\Selina\AppData\Local\Mozilla\Firefox\Profiles\8cmuviq6.default\cache2\entries\D5A001714A9C63336522CB1636D870B32656047C" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\optprosetup.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\5A00\temp\Preserver.xyz" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\BF80\temp\MyPCBackup.exe.tmp" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\BF80\temp\SystemAdvance.xyz" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\DMR\dmr_72.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\is1948636036\049F5D20_stp\OptimizerPro.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\AppData\Local\Temp\stF476.tmp\PicexaSvc.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\Downloads\HSS-3.42-install-hss-600-conduit.exe" => Datei/Ordner nicht gefunden.
"C:\Users\Selina\Downloads\Synaptics TouchPad Treiber - CHIP-Installer.exe" => Datei/Ordner nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02554177-D27A-4093-8467-1296F3541CFE} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B0A9D92-6D5C-4FBC-BAE6-01190DCA6424} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Search Updater => Schlüssel nicht gefunden.
EmptyTemp: => 184.1 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden..
==== Ende von Fixlog 23:19:46 ====
|
|
18.08.2015, 18:42
| #13 |
| /// the machine /// TB-Ausbilder | Wörter im Internet werden zu Links (blau unterstrichen und mit grünen Pfeilen versehen) Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
dann auf 
und dann auf 
. 
+ R Taste und schreibe Combofix /Uninstall in das 
Linear-Darstellung
