![]() |
|
Log-Analyse und Auswertung: Windows 8 Download Protect 2.2.12 hat sich eingenistetWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Windows 8 Download Protect 2.2.12 hat sich eingenistet Guten Tag, ich habe seit gestern festgestellt, dass ich die oben genannte Malware auf meinem System. Durch Google bin ich auf dieses Board gestoßen und hoffe, dass mir jemand bei meinem Problem helfen kann. Ich habe vorab laut einer Anleitung schon Malwarebites Anti-Malware installiert und durchlaufen lassen. Hier die txt vom ersten Durchlauf: Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 23.08.2015 Suchlaufzeit: 05:25 Protokolldatei: mbam.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.08.22.04 Rootkit-Datenbank: v2015.08.16.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Juan Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 376171 Abgelaufene Zeit: 25 Min., 12 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 4 PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\DnsBlockA.dll, , [12caf318117af5412545f42b30d307f9], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\DnsBlockA.dll, , [12caf318117af5412545f42b30d307f9], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\DnsBlockB.dll, , [776568a3cebdfe384f1cda458b784cb4], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\DnsBlockB.dll, , [776568a3cebdfe384f1cda458b784cb4], Registrierungsschlüssel: 59 PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect.1, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DPBHO.DownloadProtect, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\DPBHO.DownloadProtect, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\DPBHO.DownloadProtect.1, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\DPBHO.DownloadProtect.1, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, HKLM\SOFTWARE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}\INPROCSERVER32, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1cc2bb80-20ab-43e5-b958-432d72b546ca}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{c73e229d-5127-4e12-80eb-a51818f55311}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F4DD775F-ECBD-44A8-B472-916072DED4F7}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F4DD775F-ECBD-44A8-B472-916072DED4F7}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F4DD775F-ECBD-44A8-B472-916072DED4F7}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{c73e229d-5127-4e12-80eb-a51818f55311}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{c73e229d-5127-4e12-80eb-a51818f55311}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{1CC2BB80-20AB-43E5-B958-432D72B546CA}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1CC2BB80-20AB-43E5-B958-432D72B546CA}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1CC2BB80-20AB-43E5-B958-432D72B546CA}, , [895388833556e5510082d0078d75916f], PUP.Optional.GreatFind.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1CC2BB80-20AB-43E5-B958-432D72B546CA}, , [895388833556e5510082d0078d75916f], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{a8345a32-3b31-410a-bfbf-f2fdb81ba019}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{d2853659-4f85-41ef-83d9-26286d4b8605}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E5478627-F318-4374-BCC5-C868F3FCE022}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E5478627-F318-4374-BCC5-C868F3FCE022}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E5478627-F318-4374-BCC5-C868F3FCE022}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{d2853659-4f85-41ef-83d9-26286d4b8605}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{d2853659-4f85-41ef-83d9-26286d4b8605}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A8345A32-3B31-410A-BFBF-F2FDB81BA019}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A8345A32-3B31-410A-BFBF-F2FDB81BA019}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A8345A32-3B31-410A-BFBF-F2FDB81BA019}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.MoreResultsHub.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A8345A32-3B31-410A-BFBF-F2FDB81BA019}, , [14c844c74a41b77fad1afe978b7714ec], PUP.Optional.DNSBlock.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DnsBlockUpdateSvc, , [c6169a7163282d095810e639b54ef010], PUP.Optional.BDYahoo.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [2fad000b6b2062d49f11d9d9d52f54ac], PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ASP, , [994328e392f90c2aeefb011b58ab7e82], PUP.Optional.DigitalSites.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Digital Sites, , [67759a71cac164d2f47253cb0af922de], PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\RegClean Pro, , [697325e6cac1a88e48a2b765ca397888], PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\RegClean Pro_DEFAULT, , [815b6f9c7d0e280e7b70f626798a39c7], PUP.Optional.SweetPage.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\sweet-pageSoftware, , [b725da31fc8f2313b1dd553859ab9d63], PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\RegClean Pro, , [06d66ba05635c4729d05252829da2ed2], PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [05d79e6db2d981b57c729fae8b784fb1], PUP.Optional.IePluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, , [66766d9ec8c371c5093b9d9221e2fd03], PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, , [5389de2d8209e254cbc4a69612f115eb], PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [2bb13fcc2a61ac8a7c14d26aea190df3], PUP.Optional.DigitalSites.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\DSiteproducts, , [6e6ef813d5b6fc3acabb9605bf45f50b], PUP.Optional.InstallCore.C, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\InstallCore, , [4c900902c1caf343413c6d3f758f7c84], PUP.Optional.BDYahoo.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AA6677D3-FA45-4936-A20C-E5B3F7EC88A1}, , [f7e50902e3a845f1edc2941eac58e917], PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\SYSTWEAK\RegClean Pro, , [9c4024e7c5c67eb89ad090ef8c7857a9], PUP.Optional.SystemSpeedup, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\SYSTWEAK\ssd, , [26b649c26526053119d4480540c3ae52], Registrierungswerte: 3 PUP.Optional.BDYahoo.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, hxxp://de.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-sm-rhb-34__alt__ddc_dss_bd_com&p={searchTerms}, , [2fad000b6b2062d49f11d9d9d52f54ac] PUP.Optional.DownloadProtectExtension.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{A511BEA9-68CA-4467-8B8C-12CDED4F17B7}, C:\WINDOWS\Installer\{18E9D39C-FC9A-4575-90AE-841229DDBE55}\{A511BEA9-68CA-4467-8B8C-12CDED4F17B7}.xpi, , [5c808784b5d6dc5afe5aee31f40fec14] PUP.Optional.BDYahoo.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AA6677D3-FA45-4936-A20C-E5B3F7EC88A1}|URL, hxxp://de.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-sm-rhb-34__alt__ddc_dss_bd_com&p={searchTerms}, , [f7e50902e3a845f1edc2941eac58e917] Registrierungsdaten: 4 PUP.Optional.SweetPage.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.sweet-page.com/web/?type=ds&ts=1406441137&from=cor&uid=WDCXWD10SPCX-22HWST0_WD-WX71A530991609916&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.sweet-page.com/web/?type=ds&ts=1406441137&from=cor&uid=WDCXWD10SPCX-22HWST0_WD-WX71A530991609916&q={searchTerms}),,[b626f11aeba0ea4ce668134550b505fb] PUP.Optional.BDYahoo.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-sm-rhb-34__alt__ddc_dsssyc_bd_com, Gut: (www.google.com), Schlecht: (hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-sm-rhb-34__alt__ddc_dsssyc_bd_com),,[c21a31da4e3d221496403e1b0500817f] PUP.Optional.SweetPage.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.sweet-page.com/web/?type=ds&ts=1406441137&from=cor&uid=WDCXWD10SPCX-22HWST0_WD-WX71A530991609916&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.sweet-page.com/web/?type=ds&ts=1406441137&from=cor&uid=WDCXWD10SPCX-22HWST0_WD-WX71A530991609916&q={searchTerms}),,[b824a9629fecdd597cd2a7b14db8fa06] PUP.Optional.BDYahoo.A, HKU\S-1-5-21-994889132-872104614-2419786447-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-sm-rhb-34__alt__ddc_dsssyc_bd_com, Gut: (www.google.com), Schlecht: (hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bl-bir-sm-rhb-34__alt__ddc_dsssyc_bd_com),,[578592796a214ee8d00468f1877e42be] Ordner: 21 PUP.Optional.DownloadProtect.A, C:\Windows\Installer\{D55A0A86-CCC8-4D98-BB25-254AE8A1C043}, , [f6e610fb6e1d03336ef7b06f14ef6799], PUP.Optional.UpdateProc.A, C:\Users\Juan\AppData\Roaming\DigitalSites\UpdateProc, , [7e5ebf4c0a8161d5f37c0b16b350e51b], PUP.Optional.UpdateProc.A, C:\Users\Juan\AppData\Roaming\DigitalSites, , [7e5ebf4c0a8161d5f37c0b16b350e51b], PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro, , [fbe123e8d6b53afc7509ea6d08fb18e8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice\de, , [97457596701b62d474baa84019e958a8], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, , [8953c04b0c7f270f526597601be723dd], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, , [8953c04b0c7f270f526597601be723dd], PUP.Optional.SystemSpeedup, C:\Users\Juan\AppData\Roaming\Systweak\ssd, , [8f4d77943358af874a73f4056a989f61], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\2.1.1000.13665, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\Users\Juan\AppData\Roaming\Systweak\Advanced-System-Protector, , [a03cfb10dcafa88e7d3f2cd04ab825db], PUP.Optional.AdvancedSystemProtector.A, C:\Users\Juan\AppData\Roaming\Systweak\Advanced-System-Protector\2.1.1000.13665, , [a03cfb10dcafa88e7d3f2cd04ab825db], PUP.Optional.SweetPage.ShrtCln, C:\Users\Juan\AppData\Roaming\sweet-page, , [6379bf4c1576092db3cc4eb335ce1ce4], PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, , [6379f11abecd6cca764a17ffee1540c0], PUP.Optional.DnsBlock.A, C:\Users\Juan\AppData\Local\DnsBlock, , [6b7151bab1daf93d8093df3b59aadd23], PUP.Optional.DnsBlock.A, C:\Program Files (x86)\DnsBlock, , [a03cc3488dfe13236dddd842f70cb34d], Dateien: 62 PUP.Optional.DownloadProtect.A, C:\Program Files\{93B1ECAD-1E9C-4D34-9171-A09C3F2FFB47}\{5D5C12BE-B70B-46DC-8378-B2EF6919B987}.bin, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.DownloadProtect.A, C:\Program Files (x86)\{EF8FEFB6-68E5-42F3-8685-9589D7956E00}\{FEBF56FA-A497-4CFE-80EA-57DA966CDAA0}.bin, , [7c60da3164278caa0c375ddc14ec10f0], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Roaming\RPEng\76ED798F964A446C9521FC0E76BB9509\setup.exe, , [ab3152b9e0ab80b69355612b12f324dc], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Local\Temp\{55CF57CD-71C6-4BCA-9C60-FDA80C71942B}.dll, , [1ac21af1e3a84cea14d45b31b84d867a], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Local\Temp\{7BA5BE33-DD85-4F97-8173-B0964996025F}.dll, , [716b40cb90fb51e5955399f39e674ab6], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Local\Temp\{ED8D9024-6BFD-455F-971F-2927E4A90098}.dll, , [a6368b80d3b8bd79c226513b6f9627d9], PUP.Optional.DiscoveryApp.A, C:\Users\Juan\AppData\Local\Temp\si, , [6a72ff0ca4e73ff7b333724e2bd6bc44], PUP.Optional.DNSBlock.A, C:\Users\Juan\AppData\Local\Temp\setup.exe, , [1cc0e42744475dd9c40c596ae41dbd43], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Local\Temp\~nsu.tmp\Au_.exe, , [c11b07046e1d9f9731b7ff8dec19639d], PUP.Optional.DNSBlocker.A, C:\Windows\System32\dns.block, , [bd1f38d3800b51e5009454c706fd56aa], PUP.Optional.DNSBlocker.A, C:\Windows\SysWOW64\dns.block, , [3d9fcf3c6c1fc07682127c9f2cd7a15f], PUP.Optional.DownloadProtect.A, C:\Windows\Installer\{D55A0A86-CCC8-4D98-BB25-254AE8A1C043}\cdmooldchceiomeonecgcbfcemnfdcejhrx, , [f6e610fb6e1d03336ef7b06f14ef6799], PUP.Optional.DownloadProtect.A, C:\Windows\Installer\{D55A0A86-CCC8-4D98-BB25-254AE8A1C043}\xdmooldchceiomeonecgcbfcemnfdcejhml, , [f6e610fb6e1d03336ef7b06f14ef6799], PUP.Optional.DNSBlock.A, C:\Windows\System32\DnsBlockUpdateSvc.exe, , [c6169a7163282d095810e639b54ef010], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\DnsBlockA.dll, , [12caf318117af5412545f42b30d307f9], PUP.Optional.Winsock.HijackBoot, C:\Windows\SysWOW64\DnsBlockA.dll, , [1bc1ca41e9a273c36ffbf02fe1220cf4], PUP.Optional.Winsock.HijackBoot, C:\Windows\System32\DnsBlockB.dll, , [776568a3cebdfe384f1cda458b784cb4], PUP.Optional.Winsock.HijackBoot, C:\Windows\SysWOW64\DnsBlockB.dll, , [8f4d22e9ed9e51e5ff6c031cbc470ef2], PUP.Optional.UpdateProc.A, C:\Users\Juan\AppData\Roaming\DigitalSites\UpdateProc\prod.dat, , [7e5ebf4c0a8161d5f37c0b16b350e51b], PUP.Optional.UpdateProc.A, C:\Users\Juan\AppData\Roaming\DigitalSites\UpdateProc\config.dat, , [7e5ebf4c0a8161d5f37c0b16b350e51b], PUP.Optional.UpdateProc.A, C:\Users\Juan\AppData\Roaming\DigitalSites\UpdateProc\info.dat, , [7e5ebf4c0a8161d5f37c0b16b350e51b], PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\RegClean Pro, , [bd1f8d7e800bc27420c7de6932d13fc1], PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\ASP, , [09d353b87b1072c475731c2b29da6c94], PUP.Optional.RegCleanPro.A, C:\Windows\System32\Tasks\RegClean Pro_DEFAULT, , [4d8f57b43655fa3c40bad57a07fccd33], PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\Register RegClean Pro.lnk, , [fbe123e8d6b53afc7509ea6d08fb18e8], PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\RegClean Pro entfernen.lnk, , [fbe123e8d6b53afc7509ea6d08fb18e8], PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\RegClean Pro.lnk, , [fbe123e8d6b53afc7509ea6d08fb18e8], PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, , [33a90dfed1ba0036ca8ac0aab74cb44c], PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, , [18c4df2cd8b3fc3aa1f1c1b750b4b34d], PUP.Optional.DigitalSites.A, C:\Windows\Tasks\Digital Sites.job, , [5389d73482095ed8770f4655c24210f0], PUP.Optional.DigitalSites.A, C:\Windows\System32\Tasks\Digital Sites, , [0eceef1c3c4f61d5c3c43b609d67936d], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_greatfind-a.akamaihd.net_0.localstorage, , [f2ea62a9cbc01620b338f2bc52b24cb4], PUP.Optional.GreatFind.A, C:\Users\Juan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_greatfind-a.akamaihd.net_0.localstorage-journal, , [09d32edd167584b28566664860a4c13f], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\German_rcp.dat, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_07-27-2014.log, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp, , [97457596701b62d474baa84019e958a8], PUP.Optional.RegCleanerPro.A, C:\Users\Juan\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice\de\voice.wav, , [97457596701b62d474baa84019e958a8], PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, , [8953c04b0c7f270f526597601be723dd], PUP.Optional.SystemSpeedup, C:\Users\Juan\AppData\Roaming\Systweak\ssd\SSDPTstub.exe, , [8f4d77943358af874a73f4056a989f61], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\completedatabase.db, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Cookies.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\DigSign.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FilePathFIX.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FilePaths.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FileSignature.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Folders.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Md5.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Registry.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\SetupSign.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\StrSetupSign.bin, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\100oupdate.zip, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1835completedatabase.zip, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1891mupdate.zip, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1892update.zip, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1893update.zip, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1894update.zip, , [e3f92be0e2a9d660f7c57b8109f9d32d], PUP.Optional.AdvancedSystemProtector.A, C:\Users\Juan\AppData\Roaming\Systweak\Advanced-System-Protector\QDetail.db, , [a03cfb10dcafa88e7d3f2cd04ab825db], PUP.Optional.AdvancedSystemProtector.A, C:\Users\Juan\AppData\Roaming\Systweak\Advanced-System-Protector\Settings.db, , [a03cfb10dcafa88e7d3f2cd04ab825db], PUP.Optional.AdvancedSystemProtector.A, C:\Users\Juan\AppData\Roaming\Systweak\Advanced-System-Protector\Update.ini, , [a03cfb10dcafa88e7d3f2cd04ab825db], PUP.Optional.AdvancedSystemProtector.A, C:\Users\Juan\AppData\Roaming\Systweak\Advanced-System-Protector\2.1.1000.13665\ASPLog.txt, , [a03cfb10dcafa88e7d3f2cd04ab825db], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Beim zweiten Durchlauf wurden keine identifizierten Bedrohungen gefunden. Hier noch mal die txt: Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 23.08.2015 Suchlaufzeit: 13:42 Protokolldatei: mbam2.txt Administrator: Ja Version: 2.1.8.1057 Malware-Datenbank: v2015.08.23.02 Rootkit-Datenbank: v2015.08.16.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Juan Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 375960 Abgelaufene Zeit: 26 Min., 11 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Ich bitte um Hilfe bei der Entfernung von Defend Protect.. Vielen Dank im Voraus! |