Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Tune up startet nicht korrekt sonder öffnet Werbung

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 06.05.2016, 20:55   #16
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



so ich glaub ich habs, bin leider kein FAchmann in sowas!
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 04.05.2016
Suchlaufzeit: 15:13
Protokolldatei: Datei ein MBar.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.05.04.04
Rootkit-Datenbank: v2016.04.17.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Michael

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 400144
Abgelaufene Zeit: 7 Min., 48 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 17
PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, In Quarantäne, [8064a72a0a8f05317ef26d973ac92cd4], 
PUP.Optional.Wajam, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, In Quarantäne, [fee6537ef5a4d85ef47c0afa1be8d42c], 
PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, In Quarantäne, [d60e98398a0fc86ebeb2df2519eacf31], 
PUP.Optional.YesSearches, HKU\S-1-5-18\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, In Quarantäne, [796b3998069320169bb35f7018ea40c0], 
PUP.Optional.TaskRNDM, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}, In Quarantäne, [06dee4ed722739fd7d45d72305fd60a0], 
PUP.Optional.TaskRNDM, HKU\S-1-5-21-3456426499-2002686311-2510558855-1002\SOFTWARE\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}, In Quarantäne, [06dee4ed722739fd7d45d72305fd60a0], 
PUP.Optional.TaskRNDM, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\APPDATALOW\SOFTWARE\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}, In Quarantäne, [06dee4ed722739fd7d45d72305fd60a0], 
PUP.Optional.TaskRNDM, HKU\S-1-5-21-3456426499-2002686311-2510558855-1002\SOFTWARE\APPDATALOW\SOFTWARE\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}, In Quarantäne, [06dee4ed722739fd7d45d72305fd60a0], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, In Quarantäne, [6d7723ae05947fb7a4aa1ab5b151cd33], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{405ED78E-B4AA-493E-9E2D-7891F3355587}, Löschen bei Neustart, [11d313becbcec96d9c900cb164a0d828], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Dravsynlether Core, Löschen bei Neustart, [885c0bc6336685b151dd29947b8934cc], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, In Quarantäne, [fde72aa71c7d0a2c14c484c0fb080af6], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\hohosearchSoftware, In Quarantäne, [d410d0014455e155bd1a34101ce76f91], 
PUP.Optional.CouponMarvel, HKLM\SOFTWARE\WOW6432NODE\{3BDFD1D7-7A9B-4D29-80B3-D00E66E62885}, In Quarantäne, [f8ecbb16ddbca294d508323a877d1be5], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, In Quarantäne, [df05ac25dfbaae885682a59f18eb4ab6], 
PUP.Optional.IDSCProduct, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MICROSOFT\IDSC, In Quarantäne, [8460428f8c0d320420f003baee16aa56], 
PUP.Optional.HohoSearch, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, In Quarantäne, [796b5180b3e6f2444e8895af2dd6e917], 

Registrierungswerte: 16
PUP.Optional.YesSearches, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{405ED78E-B4AA-493E-9E2D-7891F3355587}|Path, \Dravsynlether Core, Löschen bei Neustart, [11d313becbcec96d9c900cb164a0d828]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffsengext, In Quarantäne, [fde72aa71c7d0a2c14c484c0fb080af6]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffsengext, In Quarantäne, [aa3a2ca57425c571c513a0a4aa59b34d]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, hxxp://www.hohosearch.com/chrome.php?uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&q={searchTerms}&ts=AHEqAHMtBnMoAE..&v=20160425&mode=ffsengext, In Quarantäne, [697b468bc9d01b1be5f3053f3cc72bd5]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, hxxp://www.hohosearch.com/chrome.php?uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&ts=AHEqAHMtBnMoAE..&v=20160425&mode=ffexttoolbar&q=, In Quarantäne, [2fb5b61b14856dc91fb9430159aa3fc1]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffsengext, In Quarantäne, [df05ac25dfbaae885682a59f18eb4ab6]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffsengext, In Quarantäne, [90543c95fe9bd16514c481c32fd409f7]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, hxxp://www.hohosearch.com/chrome.php?uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&q={searchTerms}&ts=AHEqAHMtBnMoAE..&v=20160425&mode=ffsengext, In Quarantäne, [74703e9383162214ebed0341cd3632ce]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, hxxp://www.hohosearch.com/chrome.php?uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&ts=AHEqAHMtBnMoAE..&v=20160425&mode=ffexttoolbar&q=, In Quarantäne, [855f676a5445cc6a6474c57fc53e2bd5]
Hijack.AutoConfigURL.PrxySvrRST, HKLM\SYSTEM\CONTROLSET001\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, 0hxxp://unstops.net/wpad.dat?b071ca40b5a8ed33a052b740240af66a9431617, In Quarantäne, [5094458c257490a6d77657ed2bd8b24e]
PUP.Optional.IDSCProduct, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MICROSOFT\IDSC|partner, sma, In Quarantäne, [8460428f8c0d320420f003baee16aa56]
Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigUrl, hxxp://unstops.net/wpad.dat?b071ca40b5a8ed33a052b740240af66a9431617, In Quarantäne, [8f55e6ebbddc95a1b19bf74d6d9634cc]
PUP.Optional.HohoSearch, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffsengext, In Quarantäne, [796b5180b3e6f2444e8895af2dd6e917]
PUP.Optional.HohoSearch, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffsengext, In Quarantäne, [677d646d8b0e5ed88c4af252b350b848]
PUP.Optional.HohoSearch, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, hxxp://www.hohosearch.com/chrome.php?uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&q={searchTerms}&ts=AHEqAHMtBnMoAE..&v=20160425&mode=ffsengext, In Quarantäne, [be2619b88c0dc3732da92c18a95a926e]
PUP.Optional.HohoSearch, HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, hxxp://www.hohosearch.com/chrome.php?uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&ts=AHEqAHMtBnMoAE..&v=20160425&mode=ffexttoolbar&q=, In Quarantäne, [756f8051f5a4df5786508bb9fb08cc34]

Registrierungsdaten: 2
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{22FE2833-8C38-47B1-BAF7-BEFEC2DCDAD7}|NameServer, 104.197.191.4, Gut: (), Schlecht: (104.197.191.4),Ersetzt,[3da7874ab7e2fd3949d0a2b425e0a957]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}|NameServer, 104.197.191.4, Gut: (), Schlecht: (104.197.191.4),Ersetzt,[18cc8b460f8a83b32aeff95d49bc7d83]

Ordner: 171
PUP.Optional.YesSearches, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\YourGSearchFinder_br, In Quarantäne, [9e468e433663ed49d63350f2d23114ec], 
PUP.Optional.IDSCProduct, C:\Users\Michael\AppData\Local\Temp\MAXDriverUpdater, In Quarantäne, [0dd709c8049578be7a2886bd18eb29d7], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Application Cache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\http_www.askmrrobot.com_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\http_www.remintrex.com_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\css, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\html, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\bg, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ca, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\cs, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\da, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\de, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\el, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\en, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\en_GB, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\es, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\es_419, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\et, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\fi, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\fil, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\fr, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\hi, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\hr, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\hu, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\id, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\it, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ja, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ko, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\lt, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\lv, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\nb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\nl, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\pl, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\pt_BR, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\pt_PT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ro, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ru, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sk, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sl, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sr, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sv, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\th, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\tr, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\uk, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\vi, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\zh_CN, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\zh_TW, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_metadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\000, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\000\t, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\000\t\Paths, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\GCM Store, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.facebook.com_0.indexeddb.leveldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.netflix.com_0.indexeddb.leveldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Extension Settings, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\oTKPrEGLzc1KgFGDq2vSLPfV5pY=, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\HB65LNM9, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\aka.spotxcdn.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\casino.skillonnet.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn.stickyadstv.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn.vidible.tv, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn.vidible.tv\##60F3E3CFDE4C58AC, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn2.dashbida.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn2.dashbida.com\prod, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn2.dashbida.com\prod\vpaid2-dbfp.swf, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\images-na.ssl-images-amazon.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\##45EC4C9792AE2268, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#casino.skillonnet.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#cdn.vidible.tv, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#stake7.postaffiliatepro.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\scontent.lrcdn.net, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\stake7.postaffiliatepro.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\tag.sprtad.com, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Platform Notifications, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Plugin Data, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Plugin Data\Google Gears, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\index-dir, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\index-dir, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Thumbnails, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\User StyleSheets, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Caps, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\reports, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\_metadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\_platform_specific, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\_platform_specific\all, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PepperFlash, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PepperFlash\21.0.0.216, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_metadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\ShaderCache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader\3.2.6.45159, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter\6.48.4, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter\6.48.4\_metadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\imgs, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_metadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_platform_specific, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_platform_specific\win_x86, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\events, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe\11, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.4, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\Yahoo Inc, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 

Dateien: 538
PUP.Optional.PennyBee, C:\Users\Michael\AppData\Local\Temp\5aMKHSoRFx.exe, In Quarantäne, [d80c9a37f3a6a78fe59f38a5956c38c8], 
PUP.Optional.CSDI, C:\Users\Michael\AppData\Local\Temp\HDV3VHBI58.exe, In Quarantäne, [5d873e93aced90a65726db9d42c356aa], 
PUP.Optional.CrossAd.Gen, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, In Quarantäne, [d90b0ec33d5c7db9278ab592e32013ed], 
PUP.Optional.CrossAd.Gen, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, In Quarantäne, [6183923f6d2c91a5129fd37411f2847c], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Secure Preferences, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Bookmarks, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\ChromeDWriteFontCache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Cookies, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Cookies-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Current Session, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Current Tabs, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\DownloadMetadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension Cookies, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension Cookies-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Favicons, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Favicons-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Google Profile.ico, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\History, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\History-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Last Session, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Last Tabs, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Login Data, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Network Action Predictor, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Network Action Predictor-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Network Persistent State, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Origin Bound Certs, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Origin Bound Certs-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Preferences, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\QuotaManager, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\QuotaManager-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\README, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Secure Preferencesgbak, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Shortcuts, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Shortcuts-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Top Sites-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\TransportSecurity, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Visited Links, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Data, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Data-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Datagbak, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\History Provider Cache, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Top Sites, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\Databases.db, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\Databases.db-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\http_www.remintrex.com_0\2, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\000003.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\000014.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\000016.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\000019.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\000022.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension State\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_background.js, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\craw_window.js, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\css\craw_window.css, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\html\craw_window.html, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\flapper.gif, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\icon_128.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\icon_16.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_close.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_hover.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_maximize.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\images\topbar_floating_button_pressed.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\bg\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ca\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\cs\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\da\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\de\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\el\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\en\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\en_GB\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\es\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\es_419\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\et\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\fi\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\fil\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\fr\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\hi\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\hr\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\hu\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\id\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\it\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ja\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ko\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\lt\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\lv\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\nb\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\nl\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\pl\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\pt_BR\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\pt_PT\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ro\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\ru\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sk\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sl\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sr\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\sv\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\th\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\tr\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\uk\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\vi\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\zh_CN\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_locales\zh_TW\messages.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.0_0\_metadata\verified_contents.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\000\t\.usage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\000\t\Paths\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins\000003.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\File System\Origins\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\GCM Store\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\GCM Store\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\GCM Store\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.facebook.com_0.indexeddb.leveldb\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.facebook.com_0.indexeddb.leveldb\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.facebook.com_0.indexeddb.leveldb\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb\000003.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\https_www.google.de_0.indexeddb.leveldb\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\000003.bak, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\000003.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\000006.bak, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\000006.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\000007.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.amazon.de_0.indexeddb.leveldb\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.netflix.com_0.indexeddb.leveldb\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.netflix.com_0.indexeddb.leveldb\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\IndexedDB\http_www.netflix.com_0.indexeddb.leveldb\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FA6E.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FA7E.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FA7F.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FA80.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAA0.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAA1.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAA2.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAA3.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAB4.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAB5.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAB6.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAB7.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAB8.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAC9.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FACA.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FACB.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FADB.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FADC.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FADD.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FADE.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAEF.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FAFF.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FB00.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\FB11.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D38.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D39.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D49.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D4A.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D5B.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D5C.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D6C.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D6D.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D6E.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D7F.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D80.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D81.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D82.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D93.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D94.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7D95.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DA5.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DA6.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DA7.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DA8.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DB9.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DBA.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DBB.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\7DBC.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\chrome-devtools_devtools_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\chrome-devtools_devtools_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_clients5.google.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_clients5.google.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_config1.veinteractive.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_config1.veinteractive.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_connexity.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_connexity.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_d1s3stoxy55mu3.cloudfront.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_d1s3stoxy55mu3.cloudfront.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_dub124.mail.live.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_dub124.mail.live.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_hades.srvtrck.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_halc.iadvize.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_halc.iadvize.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_hangouts.google.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_hangouts.google.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_imagesrv.adition.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_imagesrv.adition.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_plus.google.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_plus.google.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_topvintage.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_topvintage.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.amazon.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_c.betrad.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_hades.srvtrck.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.amazon.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.youtube.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_disqus.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_lp.stargames.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_runen.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.canon.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.gutefrage.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.rabatt-rudi.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.bankofscotland.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.bankofscotland.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.cbooking.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.cbooking.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.ebay-kleinanzeigen.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.ebay-kleinanzeigen.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.google.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.google.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.stake7.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.stake7.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.youtube.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_127.0.0.1_8087.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_127.0.0.1_8087.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_adservices02.picadmedia.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_adservices02.picadmedia.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_ams1-ib.adnxs.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_ams1-ib.adnxs.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_c.betrad.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_c.betrad.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_connexity.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_connexity.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_d1s3stoxy55mu3.cloudfront.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_d1s3stoxy55mu3.cloudfront.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_de.wowhead.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_de.wowhead.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_disqus.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_ds.serving-sys.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_ds.serving-sys.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_forum.chip.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_forum.chip.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_gft2.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_gft2.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_hades.srvtrck.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_hades.srvtrck.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_images.intellitxt.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_images.intellitxt.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_imagesrv.adition.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_imagesrv.adition.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_lp.stargames.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_mb.zam.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_mb.zam.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_onhax.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_onhax.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_pathsoftware.blogspot.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_pathsoftware.blogspot.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_runen.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_search.tvnewpagesearch.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_search.tvnewpagesearch.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_tradownload.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_tradownload.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_us-ads.openx.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_us-ads.openx.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_widgets.outbrain.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_widgets.outbrain.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_wow.mmozone.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_wow.mmozone.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.4shared.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.4shared.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.amazon.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.amazon.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.askmrrobot.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.askmrrobot.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.avg.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.avg.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_ad.doubleclick.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_ad.doubleclick.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_c.betrad.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.canon.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.computerbild.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.computerbild.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.computerhilfen.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.computerhilfen.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.fashion24.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.fashion24.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.fashionesta.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.fashionesta.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.geo.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.geo.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.gutefrage.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.hstt.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.hstt.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.icy-veins.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.icy-veins.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.mikrocontroller.net_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.mikrocontroller.net_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.noxxic.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.noxxic.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.pcwelt-forum.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.pcwelt-forum.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.pcwelt.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.pcwelt.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1],
         

Alt 06.05.2016, 20:57   #17
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Code:
ATTFilter
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.rabatt-rudi.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.seejay.cloud_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.seejay.cloud_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.shopping24.de_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.shopping24.de_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.tui.com_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.tui.com_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.wohngeld.org_0.localstorage, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\http_www.wohngeld.org_0.localstorage-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\CertStore.dat, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\CertStore.dat.lkg, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\gss.dat, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\gss.lkg, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\msk.dat, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\msk.lkg, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\psk.dat, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\psk.lkg, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\oTKPrEGLzc1KgFGDq2vSLPfV5pY=\sss.dat, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\0\Flash_Player\oTKPrEGLzc1KgFGDq2vSLPfV5pY=\sss.lkg, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\casino.skillonnet.com\Data.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\cdn2.dashbida.com\prod\vpaid2-dbfp.swf\dbStore.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\images-na.ssl-images-amazon.com\mercury.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\##45EC4C9792AE2268\00000001.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\settings.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#casino.skillonnet.com\settings.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#cdn.vidible.tv\settings.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\macromedia.com\support\flashplayer\sys\#stake7.postaffiliatepro.com\settings.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DZB7HWBT\stake7.postaffiliatepro.com\pap20.sol, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Platform Notifications\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Platform Notifications\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Platform Notifications\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Plugin Data\Google Gears\localserver.db, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Plugin Data\Google Gears\permissions.db, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\index.txt, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\061181e0963f41b5_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\07bb856eeb490ddf_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\1157fee2e2dc1968_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\116808a9a98de946_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\19aec4c7aa14b407_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\295b3414936c6d45_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\2a0c129ab4dd6be2_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\2a66effcd4d115de_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\33a474001b630f7c_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\3c272b05af6ee47e_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\40464117f1d7dd4b_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\40bba07c05914591_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\4181d5060efaecb0_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\43d8d340476d6406_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\452b548022261e9e_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\47a8200847f51f40_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\50da1ec5d44a313d_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\54606de4f812d4a9_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\5665860855bf59d6_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\5fc8be3d12875051_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\608d13fb70947f94_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\66aebdc067b65fa7_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\684655112f0ba0cf_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\6edce0d985ccbfa1_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\6ee8b46a1448961f_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\7f533a311ca570c7_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\911396d9372fae34_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\935138ce2d6e7c79_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\a6e9269406dca77f_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\b7093abd403a02ec_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\bb67094770a3b053_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\c661647fba4ed1fc_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\cb041bf079a9ba2e_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\cf6b6b7375c07db1_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\e599dc5e24eb76d7_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\f35c1c718e373964_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\f5566ed965ba48f2_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\fc3ca4455287b2ea_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\fdf2cfeb8ad0eeac_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\index, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\CacheStorage\e6622492fa163609ddd4212f54512baa07929ed3\2837DF6B-51B7-4860-AE53-9CF8BC9335B7\index-dir\the-real-index, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database\000003.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\Database\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\0b9a5ce89ad808e4_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\0b9a5ce89ad808e4_1, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\4df33e08c731eafb_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\4df33e08c731eafb_1, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\index, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Service Worker\ScriptCache\index-dir\the-real-index, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\000371.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\000372.log, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\000373.ldb, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\LOG, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\LOG.old, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Thumbnails\CURRENT, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Thumbnails\LOCK, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Thumbnails\MANIFEST-000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\User StyleSheets\Custom.css, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\Chrome Web Store-Zahlungen.ico, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications\_crx_nmmhkkegccagdldgiimedpiccmgmieda\Chrome Web Store-Zahlungen.ico.md5, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\311B.tmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Certificate Revocation Lists, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\de-DE-3-0.bdic, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\First Run, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Local State, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Bloom, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Bloom Prefix Set, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Cookies, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Cookies-journal, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Csd Whitelist, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Download, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Download Whitelist, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Extension Blacklist, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Inclusion Whitelist, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing IP Blacklist, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing UwS List, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing UwS List Prefix Set, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\metadata, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\settings.dat, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\reports\041a149b-d223-41f0-9c74-5911803b13c5.dmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\reports\a66f2a14-e070-4077-b86c-67471052cec8.dmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\reports\dece250e-de7f-4d38-99b6-d74627760000.dmp, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\manifest.fingerprint, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\_metadata\verified_contents.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist\7\_platform_specific\all\ev_hashes_whitelist.bin, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PepperFlash\21.0.0.216\manifest.fingerprint, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PepperFlash\21.0.0.216\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PepperFlash\21.0.0.216\pepflashplayer.dll, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\manifest.fingerprint, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_metadata\verified_contents.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_pnacl_json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl\0.46.0.4\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache\data_0, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache\data_1, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache\data_2, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache\data_3, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache\f_000001, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PnaclTranslationCache\index, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader\3.2.6.45159\libEGL.dll, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader\3.2.6.45159\libGLESv2.dll, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader\3.2.6.45159\manifest.fingerprint, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader\3.2.6.45159\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter\6.48.4\manifest.fingerprint, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter\6.48.4\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter\6.48.4\software_reporter_tool.exe, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter\6.48.4\_metadata\verified_contents.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\manifest.fingerprint, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\manifest.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\imgs\icon-128x128.png, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_metadata\verified_contents.json, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_platform_specific\win_x86\CdmAdapterVersion, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_platform_specific\win_x86\widevinecdm.dll, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM\1.4.8.866\_platform_specific\win_x86\widevinecdmadapter.dll, In Quarantäne, [b03422af405940f635a52e5265a03fc1], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffseng");), Ersetzt,[bb2991404c4d0b2bdd838cf57d88847c]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (1);
user_pref("browser.cache.disk.smart_size.first_run", false);
user_pref("browser.cache.disk.smart_size.use_old_max", false);
user_pref("browser.cache.frecency_ex), Ersetzt,[f6ee1cb58910c76f79e76c150ff6f907]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (ile the application is running,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_p), Ersetzt,[a73d755c8415a2943e22c8b9e520c937]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (ning,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_pref("accessibility.typeahea), Ersetzt,[26be4190b1e80f27fc64d1b063a2d12f]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (",\"descriptor\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\features\\\\loop@mozilla.org.xpi\",\"multiprocessCompatible\":false,\"runInSafeMode\":true}}");
user_pref("extensions.checkCo), Ersetzt,[44a0d0017f1ad95d0d53750c669f2ad6]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Gut: (), Schlecht: (_pref("browser.search.defaultenginename.US", "data:text/plain,browser.search.defaultenginename.US=hohosearch");
user_pref("browser.search.region", "DE");
user_pre), Ersetzt,[94506d64514888ae312f5c2519ecfd03]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml, In Quarantäne, [7b69537ef1a813239346a4dc8382ef11], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\DD1B66D4.xml, In Quarantäne, [06deeee39dfc4aecb029eb953acb7c84], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\addons.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\blocklist.xml, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cert8.db, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\compatibility.ini, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\content-prefs.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cookies.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.ini, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\key3.db, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\mimeTypes.rdf, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\parent.lock, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\permissions.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\places.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\pluginreg.dat, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\revocations.txt, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\search-metadata.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\secmod.db, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionCheckpoints.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\SiteSecurityServiceState.txt, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\times.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\user.js, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webappsstore.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\xulstore.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups\bookmarks-2015-06-21_14_83V0Tl4iYq472qYtWkHm8Q==.jsonlz4, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\store.json.mozlz4, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\state.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe\11\eme-adobe.dll, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe\11\eme-adobe.info, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-eme-adobe\11\eme-adobe.voucher, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.4\gmpopenh264.dll, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp-gmpopenh264\1.4\gmpopenh264.info, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport\state.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\previous.js, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\upgrade.js-20150513174244, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups\upgrade.js-20150525141253, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\.metadata, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.FakeFFProfile, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps\webapps.json, In Quarantäne, [766ee4ed900982b4bf20cbb5669fa45c], 
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://www.hohosearch.com/?ts=AHEqAHMtBnMoAE..&v=20160425&uid=5200C269363119C66D9EF51A0B45B22E&ptid=epf1&mode=ffseng");), Ersetzt,[5391fad7f4a5dc5a85db166b7e87ca36]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (cklist-background-update-timer", 1434886165);
user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 1435073968);
user_pref("app.update.lastUpdateTime.exp), Ersetzt,[d90b9839c8d11a1cc898c0c12adb6c94]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (ile the application is running,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_p), Ersetzt,[954f9f32cfcaac8a114f6e1327deca36]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (ning,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_pref("accessibility.typeahea), Ersetzt,[16ce0fc23d5ca294065a077a25e00000]
PUP.Optional.HohoSearch, C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Gut: (), Schlecht: (_pref("app.update.lastUpdateTime.addon-background-update-timer", 1434886045);
user_pref("app.update.lastUpdateTime.background-update-timer", 1434886525);
us), Ersetzt,[b52f547de8b1ec4aa0c0513061a48f71]

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
__________________


Alt 07.05.2016, 11:41   #18
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
__________________

Alt 07.05.2016, 18:37   #19
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.05.07.03
  rootkit: v2016.05.06.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18282
Michael :: MICHAEL-PC [administrator]

07.05.2016 19:09:39
mbar-log-2016-05-07 (19-09-39).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 340650
Time elapsed: 12 minute(s), 53 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Alt 08.05.2016, 14:47   #20
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.05.2016, 21:56   #21
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Code:
ATTFilter
# AdwCleaner v5.115 - Bericht erstellt am 08/05/2016 um 22:47:37
# Aktualisiert am 01/05/2016 von Xplode
# Datenbank : 2016-05-08.4 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Michael - MICHAEL-PC
# Gestartet von : C:\Users\Michael\Downloads\AdwCleaner_5.115.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner gelöscht : C:\Program Files (x86)\DriverToolkit
[-] Ordner gelöscht : C:\Users\Michael\AppData\Local\DriverToolkit

***** [ Dateien ] *****

[-] Datei gelöscht : C:\END

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht : HKCU\Software\DriverToolkit
[-] Schlüssel gelöscht : HKLM\SOFTWARE\BrowsingSecure
[-] Schlüssel gelöscht : HKLM\SOFTWARE\SrpnFiles
[-] Schlüssel gelöscht : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\{G6276374-DEEE-4AAA-A355-9016A2F98A2D}
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\BrowsingSecure
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdncache-a.akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\bestpriceninja.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pstatic.bestpriceninja.com

***** [ Internetbrowser ] *****


*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
:: Chrome Einstellungen zurückgesetzt : C:\Users\Nadja\AppData\Local\Google\Chrome\User Data\Default

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2519 Bytes] - [08/05/2016 22:47:37]
C:\AdwCleaner\AdwCleaner[S1].txt - [2355 Bytes] - [08/05/2016 22:44:19]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2665 Bytes] ##########
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 7 Home Premium x64 
Ran by Michael (Administrator) on 08.05.2016 at 22:52:53,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 28 

Successfully deleted: C:\ProgramData\7b24ec7cc000461ebe26d116b88142c8 (Folder) 
Successfully deleted: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\user.js (File) 
Successfully deleted: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\xv3c9y0w.default\user.js (File) 
Successfully deleted: C:\Users\Michael\AppData\Roaming\pdfforge (Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6I9SK9AH (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FNSW5HH6 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FR7PF2F2 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H1A2O9P1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LYN519TV (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QFJ2TN5M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SHNKU5MD (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XA7CTRQQ (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6I9SK9AH (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FNSW5HH6 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FR7PF2F2 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H1A2O9P1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LYN519TV (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QFJ2TN5M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SHNKU5MD (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XA7CTRQQ (Temporary Internet Files Folder) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.05.2016 at 22:54:47,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Alt 09.05.2016, 07:49   #22
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 09.05.2016, 18:22   #23
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016
durchgeführt von Michael (Administrator) auf MICHAEL-PC (09-05-2016 19:20:21)
Gestartet von C:\Users\Michael\Downloads
Geladene Profile: Michael (Verfügbare Profile: Michael & Nadja)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\SysWOW64\ASGT.exe
(ASUSTeK Computer Inc.) C:\ProgramData\ASUS\AsSysCtrlService\2.00.00\AsSysCtrlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes) D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Malwarebytes) D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\FaxApplications.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
() C:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe
(Curse) C:\Users\Michael\AppData\Local\Apps\2.0\T7P3DMCX.0ZM\H2YTT0AM.7W9\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [TNOD UP] => "C:\Users\Michael\AppData\Local\Temp\Rar$EXa0.400\Portable\TNODUP-Portable.exe" /i <===== ACHTUNG
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5015040 2012-02-09] (VIA)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.94.193\AsusWSPanel.exe [734544 2011-04-11] (ecareme)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\...\Run: [TSMApplication] => C:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe [1623040 2016-03-19] ()
HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\...\MountPoints2: {2ed961ec-26e6-11e5-afe1-f079598c5582} - G:\pushinst.exe
HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.94.193\ASUSWSShellExt64.dll [2011-04-11] (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.94.193\ASUSWSShellExt64.dll [2011-04-11] (eCareme Technologies, Inc.)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2016-05-06] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{22FE2833-8C38-47B1-BAF7-BEFEC2DCDAD7}: [DhcpNameServer] 192.168.2.1
ManualProxies: 

Internet Explorer:
==================
HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE07&ocid=UE07DHP
SearchScopes: HKU\S-1-5-21-3456426499-2002686311-2510558855-1000 -> {1DA091C1-A832-49B2-9036-3DBA2D0DA9CF} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3456426499-2002686311-2510558855-1000 -> {69262C54-39EF-4756-9254-54A7E890953F} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3456426499-2002686311-2510558855-1000 -> {6E56DA95-D6C0-4D6F-8088-F79B0BB70A36} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3456426499-2002686311-2510558855-1000 -> {E964E5B8-0BC8-4F2F-BE06-9B1D20362E20} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-28] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-04-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-04-27] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]
R2 AsSysCtrlService; C:\ProgramData\ASUS\AsSysCtrlService\2.00.00\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-06-18] (BitRaider, LLC)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2519904 2016-04-13] (ESET)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-03-30] (NVIDIA Corporation)
R2 MBAMScheduler; D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-03-30] (NVIDIA Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-23] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264552 2016-04-13] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2016-04-13] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [170792 2016-04-13] (ESET)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-05-09] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-03-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-05-09 19:20 - 2016-05-09 19:20 - 00012502 _____ C:\Users\Michael\Downloads\FRST.txt
2016-05-09 19:19 - 2016-05-09 19:19 - 02381312 _____ (Farbar) C:\Users\Michael\Downloads\FRST64.exe
2016-05-08 22:54 - 2016-05-08 22:54 - 00004897 _____ C:\Users\Michael\Desktop\JRT.txt
2016-05-08 22:52 - 2016-05-08 22:52 - 01610816 _____ (Malwarebytes) C:\Users\Michael\Downloads\JRT.exe
2016-05-08 22:43 - 2016-05-08 22:47 - 00000000 ____D C:\AdwCleaner
2016-05-08 22:43 - 2016-05-08 22:43 - 03615296 _____ C:\Users\Michael\Downloads\AdwCleaner_5.115.exe
2016-05-07 19:06 - 2016-05-07 19:07 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Michael\Downloads\mbar-1.09.3.1001.exe
2016-05-06 21:49 - 2016-05-06 21:49 - 00157220 _____ C:\Users\Michael\Documents\Datei ein MBar.txt
2016-05-06 08:58 - 2016-05-06 08:58 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2016-05-06 08:58 - 2016-05-06 08:58 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-06 08:58 - 2016-05-06 08:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-05-06 08:48 - 2016-04-04 20:14 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-05-06 08:48 - 2016-04-04 20:02 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-05-06 08:48 - 2016-04-02 15:08 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-05-06 08:48 - 2016-03-23 16:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-05-06 08:48 - 2016-03-17 20:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-05-06 08:48 - 2016-03-17 20:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-05-06 08:48 - 2016-03-17 20:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-05-06 08:48 - 2016-03-17 20:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-05-06 08:48 - 2016-02-05 20:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-05-06 08:48 - 2016-02-05 20:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-05-06 08:48 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2016-05-06 08:48 - 2015-06-03 22:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-05-06 08:47 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-05-06 08:47 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-05-06 08:47 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-05-06 08:47 - 2016-02-01 21:08 - 00114624 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-05-06 08:47 - 2016-02-01 20:59 - 03243008 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-05-06 08:47 - 2016-02-01 20:59 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-05-06 08:47 - 2016-02-01 20:59 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-05-06 08:47 - 2016-02-01 20:56 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-05-06 08:47 - 2016-02-01 20:56 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-05-06 08:47 - 2016-02-01 20:49 - 02364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-05-06 08:47 - 2016-02-01 20:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-05-06 08:47 - 2016-02-01 20:49 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-05-06 08:47 - 2016-02-01 20:45 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-05-06 08:47 - 2016-01-22 08:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-05-06 08:47 - 2016-01-22 08:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-05-06 08:47 - 2016-01-22 08:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-05-06 08:47 - 2016-01-22 08:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-05-06 08:47 - 2016-01-22 07:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-05-06 08:47 - 2016-01-22 07:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-05-06 08:47 - 2015-08-05 19:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2016-05-06 08:47 - 2015-08-05 19:06 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2016-05-06 08:47 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-05-06 08:47 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2016-05-06 08:47 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2016-05-06 08:47 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-05-06 08:46 - 2016-02-02 20:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-05-06 08:46 - 2016-01-21 02:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-05-06 08:46 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-05-06 08:46 - 2015-12-16 20:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-05-06 08:46 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-05-06 08:46 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-05-06 08:46 - 2015-12-16 20:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-05-06 08:46 - 2015-12-16 20:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2016-05-06 08:46 - 2015-12-16 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2016-05-06 08:46 - 2015-12-16 20:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2016-05-06 08:46 - 2015-12-16 20:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-05-06 08:46 - 2015-12-16 16:38 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2016-05-06 08:46 - 2015-12-16 16:37 - 00419928 _____ C:\Windows\system32\locale.nls
2016-05-06 08:46 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-05-06 08:46 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-05-06 08:46 - 2015-10-29 19:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2016-05-06 08:46 - 2015-10-29 19:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2016-05-06 08:46 - 2015-10-29 19:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2016-05-06 08:46 - 2015-10-29 19:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2016-05-06 08:46 - 2015-10-29 19:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2016-05-06 08:46 - 2015-10-29 19:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2016-05-06 08:46 - 2015-10-29 19:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2016-05-06 08:46 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2016-05-06 08:46 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2016-05-06 08:46 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2016-05-06 08:46 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2016-05-06 08:46 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-05-06 08:46 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2016-05-06 08:46 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-05-06 08:46 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2016-05-06 08:40 - 2016-03-09 21:00 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-05-06 08:40 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-06 08:40 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-06 08:39 - 2016-03-09 21:00 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-05-06 08:39 - 2016-03-09 20:40 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-05-06 08:39 - 2016-03-09 20:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2016-05-04 15:10 - 2016-05-04 15:29 - 00000781 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-05-04 15:10 - 2016-05-04 15:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-05-04 15:10 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-04 15:10 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-04 14:59 - 2016-05-04 14:59 - 00000000 ____D C:\ProgramData\TEMP
2016-05-04 08:05 - 2016-05-04 15:29 - 00001151 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-04 08:05 - 2016-05-04 15:29 - 00001145 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-05-04 08:05 - 2016-05-04 08:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-04 08:05 - 2016-05-04 08:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-04 07:40 - 2016-05-04 07:40 - 00262144 ____N C:\Windows\Minidump\050416-17830-01.dmp
2016-05-04 07:40 - 2016-05-04 07:40 - 00000000 ____D C:\Windows\Minidump
2016-05-04 07:15 - 2016-05-04 15:28 - 00000911 _____ C:\Users\Michael\Desktop\Revo Uninstaller.lnk
2016-05-04 07:15 - 2016-05-04 07:15 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-05-04 06:57 - 2016-05-04 06:57 - 00000000 ____D C:\Users\Michael\AppData\Roaming\ESET
2016-05-03 23:05 - 2016-05-03 23:05 - 00000000 ____D C:\Users\Michael\AppData\Local\ESET
2016-05-03 23:02 - 2016-05-03 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-05-03 23:02 - 2016-05-03 23:02 - 00000000 ____D C:\ProgramData\ESET
2016-05-03 23:02 - 2016-05-03 23:02 - 00000000 ____D C:\Program Files\ESET
2016-05-03 21:09 - 2016-05-04 15:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-03 21:08 - 2016-05-09 19:03 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-03 21:08 - 2016-05-07 19:36 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-03 21:08 - 2016-05-07 19:07 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-03 21:07 - 2016-05-07 19:36 - 00000000 ____D C:\Users\Michael\Desktop\mbar
2016-05-03 20:49 - 2016-05-09 19:20 - 00000000 ____D C:\FRST
2016-05-03 08:52 - 2016-04-27 13:31 - 00112184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-05-03 08:50 - 2016-04-27 16:35 - 42923576 _____ C:\Windows\system32\nvcompiler.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 37567424 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 31558080 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 25322552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 21355760 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 20897608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 17749736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 17343096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 12539960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-05-03 08:50 - 2016-04-27 16:35 - 10550736 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 08659472 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 03235896 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 02810936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436510.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436510.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00957888 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00889400 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00751552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00694208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00678704 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00571912 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00501896 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00473592 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00425016 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00391816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00377792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00175552 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-05-03 08:50 - 2016-04-27 16:35 - 00129024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-05-01 11:42 - 2016-05-04 15:29 - 00001116 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-05-01 11:40 - 2016-05-08 18:41 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-04-26 21:07 - 2016-04-26 21:07 - 00000000 ____D C:\Windows\system32\SSL
2016-04-26 21:07 - 2016-04-26 21:07 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-04-26 19:53 - 2011-05-31 16:48 - 00070656 _____ C:\Windows\SysWOW64\CNC175ED.TBL
2016-04-26 19:53 - 2011-05-31 16:48 - 00070656 _____ C:\Windows\system32\CNC175ED.TBL
2016-04-26 19:53 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll
2016-04-26 19:53 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll
2016-04-26 19:52 - 2016-04-26 19:52 - 00000000 ____D C:\Windows\system32\STRING
2016-04-26 19:52 - 2012-06-14 17:18 - 00366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL
2016-04-26 19:52 - 2012-06-14 17:18 - 00359936 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2016-04-26 19:52 - 2012-06-14 17:18 - 00039424 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2016-04-26 19:52 - 2011-11-03 05:00 - 00385024 _____ (CANON INC.) C:\Windows\system32\CNMLMAZ.DLL
2016-04-26 19:52 - 2011-09-21 05:00 - 00302592 _____ (CANON INC.) C:\Windows\system32\CNCALAZ.DLL
2016-04-26 19:51 - 2016-04-26 19:51 - 00000000 ___HD C:\ProgramData\CanonIJETV
2016-04-18 18:53 - 2016-05-04 15:28 - 00000961 _____ C:\Users\Michael\Desktop\TeamSpeak 3 Client.lnk
2016-04-18 18:53 - 2016-05-01 19:21 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2016-04-18 18:32 - 2016-04-18 18:32 - 00000000 ____D C:\Windows\Flurry
2016-04-18 18:32 - 2016-04-18 18:32 - 00000000 ____D C:\Users\Michael\AppData\Roaming\dlg
2016-04-18 18:30 - 2016-04-18 18:30 - 00000000 ____D C:\Users\Michael\AppData\Roaming\NVIDIA
2016-04-14 07:44 - 2016-03-31 21:25 - 00394952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-04-14 07:44 - 2016-03-31 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-04-14 07:44 - 2016-03-31 02:54 - 25817600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-14 07:44 - 2016-03-31 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-14 07:44 - 2016-03-31 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-04-14 07:44 - 2016-03-31 02:31 - 02892800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-14 07:44 - 2016-03-31 02:28 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-14 07:44 - 2016-03-31 02:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-04-14 07:44 - 2016-03-31 02:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-14 07:44 - 2016-03-31 02:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-04-14 07:44 - 2016-03-31 02:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-04-14 07:44 - 2016-03-31 02:25 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-14 07:44 - 2016-03-31 02:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-14 07:44 - 2016-03-31 02:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-04-14 07:44 - 2016-03-31 02:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-14 07:44 - 2016-03-31 02:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-14 07:44 - 2016-03-31 02:17 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-04-14 07:44 - 2016-03-31 02:17 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-14 07:44 - 2016-03-31 02:17 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-04-14 07:44 - 2016-03-31 02:11 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-14 07:44 - 2016-03-31 02:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-14 07:44 - 2016-03-31 02:03 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-04-14 07:44 - 2016-03-31 02:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-04-14 07:44 - 2016-03-31 02:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-14 07:44 - 2016-03-31 01:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-04-14 07:44 - 2016-03-31 01:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-04-14 07:44 - 2016-03-31 01:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-14 07:44 - 2016-03-31 01:55 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-14 07:44 - 2016-03-31 01:53 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-04-14 07:44 - 2016-03-31 01:53 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-04-14 07:44 - 2016-03-31 01:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-04-14 07:44 - 2016-03-31 01:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-04-14 07:44 - 2016-03-31 01:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-04-14 07:44 - 2016-03-31 01:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-04-14 07:44 - 2016-03-31 01:51 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-04-14 07:44 - 2016-03-31 01:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-04-14 07:44 - 2016-03-31 01:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-04-14 07:44 - 2016-03-31 01:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-04-14 07:44 - 2016-03-31 01:45 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-04-14 07:44 - 2016-03-31 01:45 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-04-14 07:44 - 2016-03-31 01:45 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-04-14 07:44 - 2016-03-31 01:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-04-14 07:44 - 2016-03-31 01:43 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-14 07:44 - 2016-03-31 01:43 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-04-14 07:44 - 2016-03-31 01:42 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-14 07:44 - 2016-03-31 01:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-04-14 07:44 - 2016-03-31 01:39 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-14 07:44 - 2016-03-31 01:38 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-04-14 07:44 - 2016-03-31 01:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-04-14 07:44 - 2016-03-31 01:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-04-14 07:44 - 2016-03-31 01:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-04-14 07:44 - 2016-03-31 01:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-04-14 07:44 - 2016-03-31 01:30 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-04-14 07:44 - 2016-03-31 01:30 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-14 07:44 - 2016-03-31 01:30 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-04-14 07:44 - 2016-03-31 01:29 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-04-14 07:44 - 2016-03-31 01:24 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-04-14 07:44 - 2016-03-31 01:23 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-04-14 07:44 - 2016-03-31 01:23 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-04-14 07:44 - 2016-03-31 01:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-04-14 07:44 - 2016-03-31 01:21 - 13811712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-04-14 07:44 - 2016-03-31 01:18 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-14 07:44 - 2016-03-31 01:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-04-14 07:44 - 2016-03-31 01:05 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-04-14 07:44 - 2016-03-31 01:02 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-04-14 07:44 - 2016-03-31 01:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-04-14 07:44 - 2016-03-29 19:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-14 07:44 - 2016-03-18 01:04 - 05551336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-14 07:44 - 2016-03-18 01:04 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-04-14 07:44 - 2016-03-18 01:04 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-04-14 07:44 - 2016-03-18 01:04 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-04-14 07:44 - 2016-03-18 01:01 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-14 07:44 - 2016-03-18 01:01 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-04-14 07:44 - 2016-03-18 00:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-04-14 07:44 - 2016-03-18 00:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-04-14 07:44 - 2016-03-18 00:57 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-14 07:44 - 2016-03-18 00:57 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-04-14 07:44 - 2016-03-18 00:57 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-04-14 07:44 - 2016-03-18 00:57 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-04-14 07:44 - 2016-03-18 00:57 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-14 07:44 - 2016-03-18 00:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-14 07:44 - 2016-03-18 00:56 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-04-14 07:44 - 2016-03-18 00:54 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-04-14 07:44 - 2016-03-18 00:54 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-14 07:44 - 2016-03-18 00:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-04-14 07:44 - 2016-03-18 00:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-04-14 07:44 - 2016-03-18 00:53 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-14 07:44 - 2016-03-18 00:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-14 07:44 - 2016-03-18 00:53 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-14 07:44 - 2016-03-18 00:53 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:36 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-04-14 07:44 - 2016-03-18 00:36 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-04-14 07:44 - 2016-03-18 00:33 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-04-14 07:44 - 2016-03-18 00:31 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-04-14 07:44 - 2016-03-18 00:31 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-04-14 07:44 - 2016-03-18 00:31 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-04-14 07:44 - 2016-03-18 00:31 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-04-14 07:44 - 2016-03-18 00:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-04-14 07:44 - 2016-03-18 00:30 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-04-14 07:44 - 2016-03-18 00:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-04-14 07:44 - 2016-03-18 00:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-04-14 07:44 - 2016-03-18 00:29 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-04-14 07:44 - 2016-03-18 00:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-04-14 07:44 - 2016-03-18 00:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-04-14 07:44 - 2016-03-18 00:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-04-14 07:44 - 2016-03-18 00:27 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-04-14 07:44 - 2016-03-18 00:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-04-14 07:44 - 2016-03-18 00:27 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-04-14 07:44 - 2016-03-18 00:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-04-14 07:44 - 2016-03-18 00:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-04-14 07:44 - 2016-03-18 00:25 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-14 07:44 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-14 07:44 - 2016-03-17 23:53 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-04-14 07:44 - 2016-03-17 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-04-14 07:44 - 2016-03-17 23:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-04-14 07:44 - 2016-03-17 23:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-04-14 07:44 - 2016-03-17 23:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-04-14 07:44 - 2016-03-17 23:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-04-14 07:44 - 2016-03-17 23:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-04-14 07:44 - 2016-03-17 23:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-04-14 07:44 - 2016-03-17 23:37 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-04-14 07:44 - 2016-03-17 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-04-14 07:44 - 2016-03-17 23:35 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-14 07:44 - 2016-03-17 23:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-04-14 07:44 - 2016-03-17 23:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-04-14 07:44 - 2016-03-17 23:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-04-14 07:44 - 2016-03-17 23:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-04-14 07:44 - 2016-03-17 23:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-04-14 07:44 - 2016-03-17 23:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-04-14 07:44 - 2016-03-17 23:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-14 07:44 - 2016-03-17 23:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-14 07:44 - 2016-03-17 23:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-14 07:44 - 2016-03-17 23:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-14 07:44 - 2016-03-16 02:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-14 07:44 - 2016-03-16 02:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-14 07:44 - 2016-03-16 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-04-14 07:44 - 2016-03-11 20:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-04-14 07:44 - 2016-03-11 20:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-04-14 07:44 - 2016-03-06 20:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-14 07:44 - 2016-03-06 20:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-04-14 07:44 - 2016-03-06 20:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-04-14 07:44 - 2016-03-06 20:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-04-13 13:31 - 2016-04-13 13:31 - 00264552 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2016-04-13 13:31 - 2016-04-13 13:31 - 00186784 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2016-04-13 13:31 - 2016-04-13 13:31 - 00170792 _____ (ESET) C:\Windows\system32\Drivers\epfwwfpr.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-05-09 19:19 - 2015-12-29 00:17 - 00000436 _____ C:\Windows\Tasks\FaxArchive_CN32NBWHTS05KC.job
2016-05-09 19:13 - 2009-07-14 06:45 - 00022336 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-05-09 19:13 - 2009-07-14 06:45 - 00022336 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-05-09 19:03 - 2015-05-20 22:01 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Skype
2016-05-09 19:02 - 2015-05-18 19:52 - 00000000 ____D C:\Users\Michael\AppData\Local\Deployment
2016-05-09 18:58 - 2015-05-17 12:36 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-09 18:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-08 22:47 - 2015-05-17 15:57 - 00000008 __RSH C:\Users\Michael\ntuser.pol
2016-05-08 22:47 - 2015-05-17 11:54 - 00000000 ____D C:\Users\Michael
2016-05-08 22:18 - 2015-05-17 12:59 - 00000000 ____D C:\Users\Michael\AppData\Roaming\TS3Client
2016-05-08 22:17 - 2015-05-17 12:18 - 00000000 ____D C:\Users\Michael\AppData\Local\Battle.net
2016-05-08 18:52 - 2015-05-17 12:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2016-05-07 20:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-05-07 18:59 - 2009-07-14 06:45 - 00405376 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-06 21:16 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2016-05-06 21:16 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2016-05-06 21:16 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-06 21:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-05-06 21:08 - 2015-05-20 23:10 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-06 21:08 - 2015-05-20 23:10 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-06 21:08 - 2015-05-20 23:10 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-05-06 21:08 - 2015-05-20 23:10 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-06 08:59 - 2015-05-20 22:01 - 00000000 ____D C:\Users\Michael\AppData\Local\Skype
2016-05-06 08:59 - 2015-05-20 22:01 - 00000000 ____D C:\ProgramData\Skype
2016-05-06 08:52 - 2015-05-17 12:34 - 01593956 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-05-04 15:29 - 2016-03-28 16:02 - 00001747 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-05-04 15:29 - 2015-05-17 13:57 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-05-04 15:29 - 2015-05-17 12:10 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-05-04 15:29 - 2015-05-17 12:00 - 00001206 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk
2016-05-04 15:29 - 2015-05-17 11:51 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-05-04 15:29 - 2015-05-17 11:51 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-05-04 15:29 - 2009-07-14 06:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-05-04 15:29 - 2009-07-14 06:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-05-04 15:29 - 2009-07-14 06:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-05-04 15:29 - 2009-07-14 06:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-05-04 15:29 - 2009-07-14 06:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-05-04 15:28 - 2015-07-29 20:10 - 00001687 _____ C:\Users\Michael\Desktop\World of Warcraft Launcher - Verknüpfung.lnk
2016-05-04 15:28 - 2015-05-17 12:55 - 00000690 _____ C:\Users\Michael\Desktop\Rocks'n'Diamonds.lnk
2016-05-04 15:28 - 2015-05-17 12:25 - 00002639 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Neues Microsoft Office-Dokument.lnk
2016-05-04 15:28 - 2015-05-17 12:25 - 00002639 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Microsoft Office-Dokument öffnen.lnk
2016-05-04 15:28 - 2015-05-17 11:54 - 00001429 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-04 15:28 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-05-04 15:28 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-05-04 15:24 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-05-04 08:07 - 2015-05-17 13:05 - 00001912 _____ C:\Windows\epplauncher.mif
2016-05-04 07:19 - 2015-05-17 13:25 - 00000000 ____D C:\Program Files (x86)\AVG
2016-05-04 07:17 - 2015-12-29 00:17 - 00003592 _____ C:\Windows\System32\Tasks\FaxArchive_CN32NBWHTS05KC
2016-05-03 22:17 - 2015-08-08 15:50 - 00003706 _____ C:\Windows\System32\Tasks\Java Platform SE Auto Updater
2016-05-03 22:12 - 2015-05-17 11:58 - 00000000 ____D C:\Users\Michael\AppData\Local\Google
2016-05-03 22:12 - 2015-05-17 11:58 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-03 21:23 - 2015-05-17 12:08 - 00000000 ____D C:\Program Files\ASUS
2016-05-03 21:23 - 2015-05-17 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2016-05-03 21:23 - 2015-05-17 12:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-05-03 21:21 - 2015-05-17 12:02 - 00000000 ____D C:\Windows\System32\Tasks\ASUS
2016-05-03 08:53 - 2015-05-17 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-05-01 11:49 - 2015-06-29 10:04 - 00000000 ____D C:\Program Files (x86)\Diablo III
2016-04-28 20:44 - 2016-02-08 15:01 - 00000000 ____D C:\Users\Michael\AppData\Local\CrashDumps
2016-04-27 16:35 - 2016-03-30 08:16 - 16450472 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-04-27 16:35 - 2015-06-22 21:51 - 17248216 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-04-27 16:35 - 2015-06-22 21:51 - 03286664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-04-27 16:35 - 2015-05-17 12:59 - 19007480 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-04-27 16:35 - 2015-05-17 12:35 - 00037091 _____ C:\Windows\system32\nvinfo.pb
2016-04-27 16:35 - 2015-05-17 12:31 - 14129544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-04-27 16:35 - 2015-05-17 12:30 - 03714472 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-04-27 13:51 - 2015-12-26 14:06 - 00530880 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-04-27 13:51 - 2015-12-26 14:06 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-04-27 13:51 - 2015-05-17 12:35 - 06371384 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-04-27 13:51 - 2015-05-17 12:35 - 02993088 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-04-27 13:51 - 2015-05-17 12:35 - 02561472 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-04-27 13:51 - 2015-05-17 12:35 - 01264064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-04-27 13:51 - 2015-05-17 12:35 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-04-27 13:51 - 2015-05-17 12:35 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-04-26 21:21 - 2016-04-02 15:28 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-04-26 21:20 - 2015-05-17 12:02 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-04-26 21:19 - 2015-05-17 12:45 - 00000000 ____D C:\Program Files (x86)\HP
2016-04-26 19:53 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2016-04-25 15:46 - 2015-05-17 16:03 - 00000000 ____D C:\Users\Nadja
2016-04-25 14:18 - 2015-05-21 15:21 - 00108936 _____ C:\Users\Nadja\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-25 08:33 - 2015-05-17 12:35 - 06381278 _____ C:\Windows\system32\nvcoproc.bin
2016-04-23 20:27 - 2015-05-17 12:11 - 00108936 _____ C:\Users\Michael\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-22 09:57 - 2010-11-21 05:27 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-20 21:22 - 2015-05-17 12:53 - 00000000 ____D C:\ProgramData\PDF Architect 3
2016-04-20 21:22 - 2015-05-17 12:53 - 00000000 ____D C:\Program Files (x86)\PDF Architect 3
2016-04-15 20:28 - 2015-06-06 13:07 - 00000000 ___RD C:\Users\Michael\iCloudDrive
2016-04-14 09:44 - 2015-05-18 23:44 - 00000000 ____D C:\Windows\system32\MRT
2016-04-14 09:40 - 2015-05-18 23:44 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-04-12 21:18 - 2015-11-15 15:05 - 00159107 _____ C:\Users\Nadja\Lebenslauf.pdf
2016-04-12 09:55 - 2015-08-05 20:57 - 00000000 ____D C:\ProgramData\Oracle
2016-04-12 09:40 - 2015-12-16 21:14 - 00000000 ____D C:\Users\Michael\.oracle_jre_usage

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-09-16 18:15 - 2015-09-16 18:15 - 0004096 ____H () C:\Users\Michael\AppData\Local\keyfile3.drm
2015-05-17 12:15 - 2015-05-17 12:15 - 0007605 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2015-05-17 12:45 - 2015-05-17 12:45 - 0000057 _____ () C:\ProgramData\Ament.ini

Einige Dateien in TEMP:
====================
C:\Users\Michael\AppData\Local\Temp\dE6KMkQS1z.exe
C:\Users\Michael\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Michael\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Michael\AppData\Local\Temp\fRQikAwGYL.exe
C:\Users\Michael\AppData\Local\Temp\jAzptQHkkq.exe
C:\Users\Michael\AppData\Local\Temp\libeay32.dll
C:\Users\Michael\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Michael\AppData\Local\Temp\msvcr120.dll
C:\Users\Michael\AppData\Local\Temp\nvStInst.exe
C:\Users\Michael\AppData\Local\Temp\OZY9myuoIj.exe
C:\Users\Michael\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Michael\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Michael\AppData\Local\Temp\sqlite3.dll
C:\Users\Michael\AppData\Local\Temp\uninstall.exe
C:\Users\Michael\AppData\Local\Temp\vB9ukDHthR.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-05-08 18:09

==================== Ende von FRST.txt ============================
         
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016
durchgeführt von Michael (2016-05-09 19:21:10)
Gestartet von C:\Users\Michael\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2015-05-17 09:54:14)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3456426499-2002686311-2510558855-500 - Administrator - Disabled)
Gast (S-1-5-21-3456426499-2002686311-2510558855-501 - Limited - Disabled)
Michael (S-1-5-21-3456426499-2002686311-2510558855-1000 - Administrator - Enabled) => C:\Users\Michael
Nadja (S-1-5-21-3456426499-2002686311-2510558855-1002 - Administrator - Enabled) => C:\Users\Nadja

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: ESET NOD32 Antivirus 9.0.377.1 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 9.0.377.1 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.1.85.3 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\...\Amazon Kindle) (Version: 1.14.0.43019 - Amazon)
Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.2.0 - Asmedia Technology)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.026 - ASUSTek Computer Inc.)
ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.94.193 - eCareme Technologies, Inc.)
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 7.18.03 - ASUSTeK Computer Inc.)
ATI Catalyst Install Manager (HKLM\...\{62140B07-129A-2BD0-81D2-2A1A7408ADC8}) (Version: 3.0.762.0 - ATI Technologies, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Curse Client (HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
ESET NOD32 Antivirus (HKLM\...\{44CA1C58-5DB9-46F2-89B5-9D49CC8D918E}) (Version: 9.0.377.1 - ESET, spol. s r.o.)
Google Update Helper (x32 Version: 1.3.21.57 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
HP Officejet Pro 8600 - Grundlegende Software für das Gerät (HKLM\...\{D2D05FDB-4EDA-462D-8DB6-E0B9AD4FA25F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 365.10 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.2.55 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.55 - NVIDIA Corporation)
NVIDIA Grafiktreiber 365.10 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 365.10 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Overwolf.Setup.VC100CRTx86.Dist (x32 Version: 1.0.0 - Overwolf) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.1.2 - pdfforge)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.52.203.2012 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rocks'n'Diamonds 3.3.1.2 (HKLM-x32\...\Rocks'n'Diamonds_is1) (Version:  - Artsoft Entertainment)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.2.55 - NVIDIA Corporation) Hidden
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version:  - Bioware/EA)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TradeSkillMaster Application version 1.0 (HKLM-x32\...\{c44da794-b956-4d50-8733-346d56ae63c7}_is1) (Version: 1.0 - TradeSkillMaster)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2EB16F66-1CB1-43E9-8B47-799D808401B8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {53BBA0FC-B452-483C-ADB4-D8259908E15A} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
Task: {67D2F80B-47B7-4531-B91E-109F64D69F2F} - System32\Tasks\Microsoft\Windows\Setup\gwx\rundetector => C:\Windows\system32\GWX\GWXDetector.exe [2016-04-24] (Microsoft Corporation)
Task: {6D5D6E60-507F-4C44-ADB0-514B139DBF85} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\ProgramData\ASUS\AASP\1.02.00\AsLoader.exe [2010-01-13] (ASUSTeK Computer Inc.)
Task: {879C663B-F21B-442E-B948-41BD2975CC94} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {D28BD497-0A90-47CA-9077-ADC274E06A1B} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {D357C23B-23DA-4895-9F6E-9664438E0371} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {EE0704C9-BE63-4508-9049-4C817AEC704A} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-03-25] (ASUSTek Computer Inc.)
Task: {F6629B4B-2CD8-4098-A12F-E2849FFB81FD} - System32\Tasks\FaxArchive_CN32NBWHTS05KC => C:\Program Files\HP\HP Officejet Pro 8600\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\FaxArchive_CN32NBWHTS05KC.job => C:\Program Files\HP\HP Officejet Pro 8600\Bin\FaxApplications.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-05-17 12:35 - 2016-04-27 13:51 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2016-03-02 21:37 - 2016-03-30 03:21 - 00366528 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-03-30 08:05 - 2016-03-30 03:21 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-02 21:37 - 2016-03-30 03:22 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2015-12-26 11:41 - 2016-03-30 03:21 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-03-30 08:05 - 2016-03-30 03:21 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-03-30 08:05 - 2016-03-30 03:21 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-03-30 08:05 - 2016-03-30 03:22 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-05 20:10 - 2016-03-30 03:22 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2011-04-11 05:34 - 2011-04-11 05:34 - 00003584 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.94.193\LogicNP.PropSheetExtensionHelper_x64.dll
2016-03-30 08:05 - 2016-03-30 03:20 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-03-30 08:05 - 2016-03-30 03:20 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-03-19 10:42 - 2016-03-19 10:42 - 01623040 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe
2015-06-18 19:28 - 2015-06-18 19:28 - 00016384 ____N () C:\Users\Michael\AppData\Local\Apps\2.0\T7P3DMCX.0ZM\H2YTT0AM.7W9\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.WowDb.dll
2015-05-18 19:54 - 2015-05-18 19:53 - 00035840 _____ () C:\Users\Michael\AppData\Local\Apps\2.0\T7P3DMCX.0ZM\H2YTT0AM.7W9\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.Advertising.dll
2015-06-18 19:28 - 2015-06-18 19:28 - 00099840 ____N () C:\Users\Michael\AppData\Local\Apps\2.0\T7P3DMCX.0ZM\H2YTT0AM.7W9\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.CMOD2.dll
2015-05-17 12:00 - 2011-12-06 03:58 - 00078448 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2015-05-17 12:00 - 2011-12-06 03:58 - 00386160 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2015-05-17 12:44 - 2016-03-30 03:28 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-03-19 10:42 - 2016-03-19 10:42 - 00783360 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\_hashlib.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00047104 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\_socket.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00053760 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\_bz2.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 01861120 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\PyQt5.QtCore.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00075264 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\sip.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00137216 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\_lzma.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 02002944 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\PyQt5.QtGui.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 04101120 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\PyQt5.QtWidgets.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00039424 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\psutil._psutil_windows.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00084992 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\_ctypes.pyd
2016-03-19 10:42 - 2016-03-19 10:42 - 00758784 _____ () C:\Program Files (x86)\TradeSkillMaster Application\app\unicodedata.pyd

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-09-29 22:31 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3456426499-2002686311-2510558855-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{FDB87DAF-6EEA-4F0F-ACE1-C80A40437891}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DACFF5CD-88CB-4B60-BCC4-935EAE4C482D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{293D9C38-E035-45F4-8C4D-454C2C57DA3C}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\FaxApplications.exe
FirewallRules: [{A97B981E-5142-448C-8786-F3FF6E2949EF}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\DigitalWizards.exe
FirewallRules: [{C47CBF87-B306-475C-998D-A07AAF0E7499}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\SendAFax.exe
FirewallRules: [{F3CB0D3F-CE7C-48BB-908F-A606BFF15908}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe
FirewallRules: [{27DA7A50-E2D1-4061-9833-CBE4D0A03FC7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
FirewallRules: [{94A9BBE5-5D5C-475B-B12B-0FF3D33EAF96}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{A2250220-8406-4A33-A02A-F89D8C43F0C5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0FE76187-C52C-4569-8583-9A7C76B9DEF2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8AF7442E-63BF-4AF0-8554-9FE7EAC06BB9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4FF9FB78-B15C-4739-8D6D-DC7095FB6968}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E91F2196-2EC5-41FF-B7F9-B991A9448F00}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{191595E9-9B2D-4C26-8C91-1D8371B28D77}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{6411931A-19C3-47B2-85DE-9AF177D11FE8}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{C659BDA2-FDEA-47FD-B996-5E18122F2C98}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [TCP Query User{7FA95C9F-00D3-4E2A-9D92-C4E6106B90E4}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{3FA3F342-B6FA-4413-8B2D-963B37AA6B6B}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{9768371D-C544-47A0-9DDC-4EF9516D97F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{C133FC10-4DE8-4EC5-88B9-1B0386A012F2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{59ACD0AA-8933-4A36-887C-4CA9B8BE3AB0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{F24B66DC-E1DA-4145-8513-94E879000DB5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8EC76704-696B-46E6-B5D3-7723996F2EBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{671E920F-1142-4C25-B2A4-1698E50481E2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AA69D27A-0481-45B1-A185-7ABF44202267}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EA51ACC3-3D7C-4F6C-8808-8FE486D94901}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7C2F72DF-75AB-465E-A457-13B8CF8A8074}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{486710C2-2002-4E15-82BB-8CCCFF9C7414}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{6D8526CE-A256-42B3-9494-D88EBF0F128D}C:\sinusbot\ts3bot.exe] => (Allow) C:\sinusbot\ts3bot.exe
FirewallRules: [UDP Query User{B1A47B84-F04F-4F1C-A0AA-1271CE9C8846}C:\sinusbot\ts3bot.exe] => (Allow) C:\sinusbot\ts3bot.exe
FirewallRules: [{7B6BDAB9-1463-418E-922A-38648ACA328D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E492102E-864B-49C9-A50E-0019F050B234}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2D81B047-69F8-433A-8D99-72363C7AC80E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Wiederherstellungspunkte =========================

04-05-2016 07:17:32 AVG PC TuneUp 2015 wird entfernt
04-05-2016 07:18:37 AVG PC TuneUp 2015 (de-DE) wird entfernt
04-05-2016 07:20:09 Revo Uninstaller's restore point - Skype™ 7.7
04-05-2016 07:20:18 Removed Skype™ 7.7
04-05-2016 15:31:57 Revo Uninstaller's restore point - Trojan Remover 6.9.4.2943
06-05-2016 08:48:20 Windows Update
08-05-2016 00:57:23 Windows Update
08-05-2016 22:52:59 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (05/09/2016 07:00:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/08/2016 10:51:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/08/2016 10:38:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/08/2016 05:39:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/07/2016 07:01:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/06/2016 09:10:16 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/06/2016 08:26:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/05/2016 06:10:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/04/2016 03:36:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/04/2016 03:28:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (05/08/2016 10:53:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/08/2016 10:48:06 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (05/08/2016 10:47:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/08/2016 10:47:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/08/2016 10:47:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/08/2016 10:47:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/08/2016 10:47:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/08/2016 10:47:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VIA Karaoke digital mixer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/08/2016 10:47:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/08/2016 10:47:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


==================== Speicherinformationen =========================== 

Prozessor: AMD FX(tm)-6300 Six-Core Processor 
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16366.12 MB
Verfügbarer physikalischer RAM: 13385.65 MB
Summe virtueller Speicher: 32730.42 MB
Verfügbarer virtueller Speicher: 29612.61 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:540.79 GB) (Free:371.03 GB) NTFS
Drive d: () (Fixed) (Total:390.62 GB) (Free:318.93 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5399100D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=540.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=390.6 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Alt 09.05.2016, 19:31   #24
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 10.05.2016, 07:10   #25
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016
durchgeführt von Michael (2016-05-10 08:05:27) Run:1
Gestartet von C:\Users\Michael\Desktop
Geladene Profile: Michael (Verfügbare Profile: Michael & Nadja)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
emptytemp:
*****************

EmptyTemp: => 1.1 GB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 08:06:02 ====
         

Alt 10.05.2016, 09:18   #26
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: MBAM

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: ESET

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 11.05.2016, 20:35   #27
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 11.05.2016
Suchlaufzeit: 19:58
Protokolldatei: Mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.05.11.05
Rootkit-Datenbank: v2016.05.06.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Michael

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 339480
Abgelaufene Zeit: 23 Min., 37 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 2
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\MICROSOFT\TRACING\idscservice_RASAPI32, In Quarantäne, [6f3241934d4c8aac4b76874901026997], 
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\MICROSOFT\TRACING\idscservice_RASMANCS, In Quarantäne, [049d9c38afeab38314adfcd4699a7a86], 

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7293183e4a9e8f41867e2fbdcc9c7f39
# end=init
# utc_time=2016-05-11 06:28:31
# local_time=2016-05-11 08:28:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29443
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7293183e4a9e8f41867e2fbdcc9c7f39
# end=updated
# utc_time=2016-05-11 06:35:40
# local_time=2016-05-11 08:35:40 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=7293183e4a9e8f41867e2fbdcc9c7f39
# engine=29443
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-05-11 07:29:28
# local_time=2016-05-11 09:29:28 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 30161303 214624818 0 0
# compatibility_mode_1='ESET NOD32 Antivirus 9.0'
# compatibility_mode=8233 16777213 100 100 684791 6839134 0 0
# scanned=235933
# found=0
# cleaned=0
# scan_time=3227
         
Code:
ATTFilter
 Results of screen317's Security Check version 1.009  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
ESET NOD32 Antivirus 9.0.377.1   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 10 Flash Player out of Date! 
 Adobe Flash Player 19.0.0.185  
 Adobe Reader 10.1.16 Adobe Reader out of Date!  
 Mozilla Firefox (46.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 ESET NOD32 Antivirus egui.exe  
 ESET NOD32 Antivirus ekrn.exe  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Alt 12.05.2016, 07:31   #28
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Zitat:
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 19.0.0.185
Adobe Reader 10.1.16 Adobe Reader out of Date!
Adobe Reader deinstallieren. Verwende PDF-X-Change Viewer als bessere Alternative, oftmals reicht aber auch der interne PDF-Betrachter, der im Firefox integriert ist, völlig aus!

Und auch unbedingt den Flash Player deinstallieren, v.a. weil duda uralte Versionen von drauf hast!

Was Adobe mit seinem Flash Player veranstaltet, ist irgendwo zwischen Frechheit und Inkompetenz einzustufen. In dem Teil werden ständig neue dicke Sicherheitslücken gefunden => Der Liebling aller Cyber-Kriminellen: Flash | heise Security
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 12.05.2016, 19:25   #29
Rexa
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Frage soll ich noch was tun wenn Adobe deinstalliert ist?
und des weiteren das Programm Anti Maleware, läuft die Testversion ab, ratsam eine Vollversion zukaufen oder auch deinstallieren?

LG Rexa

Alt 12.05.2016, 19:58   #30
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Tune up startet nicht korrekt sonder öffnet Werbung - Standard

Tune up startet nicht korrekt sonder öffnet Werbung



Dann wären wir durch!

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Abschließend müssen wir noch ein paar Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.


Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.


Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und/oder mit dem ESET Online Scanner scannen.

Optional:

NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. NoScript kann gerade bei technisch nicht allzu versierten Nutzern beim Surfen zum Nervfaktor werden; ob das Tool geeignet ist, muss jeder selbst mal ausprobieren und dann für sich entscheiden. Alternativen zu NoScript (wenn um das das Verhindern von Usertracking und Werbung auf Webseiten) geht wären da Ghostery oder uBlock. Ghostery ist eine sehr bekannte Erweiterung, die aber auch in Kritik geraten ist, vgl. dazu bitte diesen Thread => Ghostery schleift Werbung durch

Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.
__________________
Logfiles bitte immer in CODE-Tags posten

Antwort

Themen zu Tune up startet nicht korrekt sonder öffnet Werbung
abend, ahnung, erwischt, funktionier, funktioniert, geladen, gen, google, guten, interne, internet, klick, korrekt, lädt, programm, seite, seiten, sekunden, starte, startet, startet nicht, tune up, versehentlich, werbung, öffnet, öffnet werbung



Ähnliche Themen: Tune up startet nicht korrekt sonder öffnet Werbung


  1. Habe mit AVG Web Tune up eingehandelt und werde es nicht mehr los
    Plagegeister aller Art und deren Bekämpfung - 17.09.2015 (8)
  2. Windows 7: Webseiten werden auf Werbung umgeleitet, Chrome startet nicht mehr
    Log-Analyse und Auswertung - 03.06.2015 (3)
  3. Searchgol Toolbar / Startseite und Tune up Utilities können nicht gelöscht werden
    Log-Analyse und Auswertung - 05.02.2014 (15)
  4. Benutzerprofil wurde nicht korrekt geladen !
    Plagegeister aller Art und deren Bekämpfung - 16.12.2013 (15)
  5. Nach Malwarebytesquarantäne startet Windows 8 nicht mehr korrekt
    Log-Analyse und Auswertung - 16.09.2013 (12)
  6. Windows 7: Komische Werbung bei Chrome und selbst öffnende Fenster nach Tune-Up Utilities Installation
    Plagegeister aller Art und deren Bekämpfung - 10.09.2013 (11)
  7. Google und Yahoo leiten mich nicht zu den Suchergebnissen weiter sonder zu irgendwelchen anderen Seiten
    Plagegeister aller Art und deren Bekämpfung - 03.01.2013 (18)
  8. Gmer wir nicht korrekt ausgeführt - was kann ich tun?
    Lob, Kritik und Wünsche - 16.09.2012 (1)
  9. Computer/Explorer öffnet sich nicht + seltsame Werbung
    Plagegeister aller Art und deren Bekämpfung - 15.01.2012 (17)
  10. WIN7 explorer.exe startet nicht korrekt
    Plagegeister aller Art und deren Bekämpfung - 17.12.2011 (1)
  11. Setup.exe Datein lassen sich nicht ausführen , und Minianwendungen werden nicht Korrekt angezeigt ?
    Log-Analyse und Auswertung - 25.06.2011 (5)
  12. Firefox öffnet Tabs mit Werbung / Anstelle einer verlinkten URL öffnet sich Werbung
    Plagegeister aller Art und deren Bekämpfung - 08.08.2010 (4)
  13. Firefox öffnet Werbung bei Links, IE öffnet selbstständig Werbung
    Plagegeister aller Art und deren Bekämpfung - 09.05.2010 (1)
  14. Internet Explorer öffnet sich und startet Werbung
    Log-Analyse und Auswertung - 31.08.2009 (4)
  15. Jscript nicht korrekt registriert?
    Log-Analyse und Auswertung - 26.01.2009 (6)
  16. IE öffnet dauernd werbung und lässt sich nicht beenden
    Log-Analyse und Auswertung - 11.08.2006 (1)
  17. AntiVir funzt nicht korrekt
    Antiviren-, Firewall- und andere Schutzprogramme - 26.06.2005 (1)

Zum Thema Tune up startet nicht korrekt sonder öffnet Werbung - so ich glaub ich habs, bin leider kein FAchmann in sowas! Code: Alles auswählen Aufklappen ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 04.05.2016 Suchlaufzeit: 15:13 Protokolldatei: Datei ein MBar.txt Administrator: Ja Version: - Tune up startet nicht korrekt sonder öffnet Werbung...
Archiv
Du betrachtest: Tune up startet nicht korrekt sonder öffnet Werbung auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.