Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 19.08.2016, 15:49   #1
hahnhuhn
 
PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus - Standard

PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus



Moin zusammen,

ich habe mir vermutlich beim Installieren von zusätzlichen Schriftarten dieses "PC Cleaner Plus" eingefangen. Nach der Suche auf der Trojaner-Board-Seite habe ich eine kurze Vorgehensweise-Anleitung gefunden.
Malewarebyte hat mit 186 Funden angeschlagen. Muß wohl noch mehr dabei sein
Hier das Log:
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 19.08.2016
Suchlaufzeit: 15:17
Protokolldatei: 20160819_mwb.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.08.19.05
Rootkit-Datenbank: v2016.08.15.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Anke

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 469439
Abgelaufene Zeit: 32 Min., 38 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\em.exe, 9228, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6]

Module: 1
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\isxdl.dll, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6], 

Registrierungsschlüssel: 26
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC Clean Plus_is1, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\advancedpccare.net, In Quarantäne, [fbf6014b2f6b43f33eeb8f4642c17b85], 
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}, In Quarantäne, [8f620745673372c4472572522fd4936d], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{2A293460-13E8-4E50-9AC4-292E204AF2AF}, Löschen bei Neustart, [11e0d3798e0c3afce6eb8868748f5ea2], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{90C17893-0B99-4B86-8B77-6B186D15956B}, In Quarantäne, [23ce56f64e4c83b32ea23ab69a69ab55], 
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DF2EE38D-F8D5-4BE6-846B-8301F2F23CCA}, Löschen bei Neustart, [24cdfb51f4a62a0c9fff9a35659f31cf], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F6FA16A8-5350-4104-A453-AAC92D2AF36C}, Löschen bei Neustart, [60917dcfedad112568699a56c24136ca], 
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Advanced-PC-Care_Logon, Löschen bei Neustart, [737edd6fe6b4eb4bb9e7656a62a22bd5], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Plus, Löschen bei Neustart, [36bb2725cfcb91a5ad69e00961a256aa], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Plus_DEFAULT, Löschen bei Neustart, [3cb55af2029845f182945990e51e1ae6], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Clean Plus_UPDATES, Löschen bei Neustart, [f6fbd478f0aabe78070fab3e15eefc04], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\Jawego, In Quarantäne, [6d8490bc99014bebbfa7e4183dc612ee], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\PC Clean Plus, In Quarantäne, [de138fbd37633501a0888c5d22e1b64a], 
PUP.Optional.SecurePCCleaner, HKLM\SOFTWARE\WOW6432NODE\EVENT MONITOR, In Quarantäne, [c52ce7658f0b2b0b7deb0cf0a65df40c], 
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}, In Quarantäne, [6e8319335347bb7b13598c38af54d030], 
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\WOW6432NODE\PC\CLEAN\Plus, In Quarantäne, [1fd270dc1e7ccb6b89a0a148ce3540c0], 
PUP.Optional.AdvancedPCCare, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\advancedpccare.net, In Quarantäne, [37baa9a3a5f5da5c70b88c49986b7e82], 
PUP.Optional.InstallCore, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\csastats, In Quarantäne, [14ddbd8fb8e268ceb6ffb842c53e6997], 
PUP.Optional.SecurePCCleaner, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\Event Monitor, In Quarantäne, [e50c3c10623844f28fd8fffd48bbe818], 
PUP.Optional.InstallCore, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\ICSW1.22, In Quarantäne, [8071e369e9b1bb7bd1648423f40f0000], 
PUP.Optional.PCCleanPlus, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PC Clean Plus, In Quarantäne, [b93883c96931b680e0467178867db64a], 
PUP.Optional.Conduit, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [25ccbf8de9b1ad89d1dc9a0237cc6997], 
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}, In Quarantäne, [06eb52fa2575e74ffe6db50f11f2df21], 
PUP.Optional.PCCleanPlus, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PC\CLEAN\Plus, In Quarantäne, [0ce5bd8fbae0e94d0027e1081ce755ab], 
PUP.Optional.ProductSetup, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PRODUCTSETUP, In Quarantäne, [b23fa3a9cdcd73c3fcee0aa640c349b7], 
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\B7A64AC7-B828-4D74-98B2-097AFA836948_is1, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 

Registrierungswerte: 11
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f[8f620745673372c4472572522fd4936d]D4%26b[8f620745673372c4472572522fd4936d]DIE%26cc[8f620745673372c4472572522fd4936d]Dde%26pa[8f620745673372c4472572522fd4936d]DWinYahoo%26cd[8f620745673372c4472572522fd4936d]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr[8f620745673372c4472572522fd4936d]D679763744%26a[8f620745673372c4472572522fd4936d]Dwny_ir_16_32_dopc%26os_ver[8f620745673372c4472572522fd4936d]D10.0%26os[8f620745673372c4472572522fd4936d]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{2A293460-13E8-4E50-9AC4-292E204AF2AF}|Path, \PC Clean Plus_UPDATES, Löschen bei Neustart, [11e0d3798e0c3afce6eb8868748f5ea2]
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{90C17893-0B99-4B86-8B77-6B186D15956B}|Path, \PC Clean Plus, In Quarantäne, [23ce56f64e4c83b32ea23ab69a69ab55]
PUP.Optional.AdvancedPCCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{DF2EE38D-F8D5-4BE6-846B-8301F2F23CCA}|Path, \Advanced-PC-Care_Logon, Löschen bei Neustart, [24cdfb51f4a62a0c9fff9a35659f31cf]
PUP.Optional.PCCleanPlus, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F6FA16A8-5350-4104-A453-AAC92D2AF36C}|Path, \PC Clean Plus_DEFAULT, Löschen bei Neustart, [60917dcfedad112568699a56c24136ca]
PUP.Optional.SecurePCCleaner, HKLM\SOFTWARE\WOW6432NODE\EVENT MONITOR|TELNO, (844) 763-5838, In Quarantäne, [c52ce7658f0b2b0b7deb0cf0a65df40c]
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f[6e8319335347bb7b13598c38af54d030]D4%26b[6e8319335347bb7b13598c38af54d030]DIE%26cc[6e8319335347bb7b13598c38af54d030]Dde%26pa[6e8319335347bb7b13598c38af54d030]DWinYahoo%26cd[6e8319335347bb7b13598c38af54d030]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr[6e8319335347bb7b13598c38af54d030]D679763744%26a[6e8319335347bb7b13598c38af54d030]Dwny_ir_16_32_dopc%26os_ver[6e8319335347bb7b13598c38af54d030]D10.0%26os[6e8319335347bb7b13598c38af54d030]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5
PUP.Optional.Conduit, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, hxxp://www.bing.com/search?pc=COSP&ptag=D081216-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}, In Quarantäne, [25ccbf8de9b1ad89d1dc9a0237cc6997]
PUP.Optional.Conduit, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURL, hxxp://www.bing.com/search?pc=COSP&ptag=D081216-A6B219395BABB4E59ADF&form=CONBDF&conlogo=CT3332005&q={searchTerms}, In Quarantäne, [747d1339cfcb5adc525b0399847ff60a]
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE7DF77A-6109-4295-96D2-30EBFED02474}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f[06eb52fa2575e74ffe6db50f11f2df21]D4%26b[06eb52fa2575e74ffe6db50f11f2df21]DIE%26cc[06eb52fa2575e74ffe6db50f11f2df21]Dde%26pa[06eb52fa2575e74ffe6db50f11f2df21]DWinYahoo%26cd[06eb52fa2575e74ffe6db50f11f2df21]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr[06eb52fa2575e74ffe6db50f11f2df21]D679763744%26a[06eb52fa2575e74ffe6db50f11f2df21]Dwny_ir_16_32_dopc%26os_ver[06eb52fa2575e74ffe6db50f11f2df21]D10.0%26os[06eb52fa2575e74ffe6db50f11f2df21]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5
PUP.Optional.ProductSetup, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\PRODUCTSETUP|tb, 0O1T1J1R1C2Z0B1K2U, In Quarantäne, [b23fa3a9cdcd73c3fcee0aa640c349b7]

Registrierungsdaten: 4
PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[0be6bb916a303105c3b1e0990202cf31]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b73a84c89ffb171fe98b0b6ece3640c0]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[b63b311b7a2025112e74e097a4602fd1]DWindowsGut: (hxxp://www.google.com)B10Gut: (hxxp://www.google.com)BHome, %4, %5
PUP.Optional.WinYahoo, HKU\S-1-5-21-2708279349-487291559-1233622218-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]DWinYahoo%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D679763744%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]Dwny_ir_16_32_dopc%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1QzuyByE0EyDtD0BtD0Ezz0DyDtAyBtCyCzztN0D0Tzu0StCyCzzyBtN1L2XzutAtFtBtAtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyB0A0EyBtA0C0AyBtGyD0C0EyEtG0Dzz0E0BtGtA0ByEzytGyByC0E0BtBtCtBtCtDtBzy0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szy0D0A0Azz0CyC0FtGyCyE0F0FtGyE0CtDtAtGzz0EtBtAtGtDzz0FyC0DyC0C0AtBtDtC0D2QtN0A0LzuyE%26cr%3D679763744%26a%3Dwny_ir_16_32_dopc%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[35bc93b9c5d577bf64601c5cfc081fe1]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5

Ordner: 18
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\voice, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\voice\de, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\smico, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x64, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x86, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-PC-Care, In Quarantäne, [b63b58f4f9a1a4922a87e9e57b8911ef], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6], 

Dateien: 125
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\efo.exe, In Quarantäne, [5c9567e59dfd9b9b7c769dc214ecca36], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\PCCleanPlus.exe, In Quarantäne, [fdf41933d3c766d04143543c2cd51ee2], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\ExcludeList.pcp, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\backup3.bin, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\backup6.bin, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\German_pcp.dat, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\irnsc.txt, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-14-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-15-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-16-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-17-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\log_08-19-2016.log, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\pcpupdate.ini, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\results.pcp, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\TempHLList.pcp, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Anke\AppData\Roaming\PC Clean Plus\voice\de\voice.wav, In Quarantäne, [29c868e4d3c7d066f918da0fd62d9e62], 
PUP.Optional.PCCleanPlus, C:\Users\Public\Desktop\PC Clean Plus.lnk, In Quarantäne, [80714b01c0da37ff5bb76e7b19ea19e7], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\unins000.dat, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Italian_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Chinese_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Danish_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Dutch_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\emsetup.exe, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\eng_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\FileList.pcp, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Finnish_pcp_fi.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\French_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\German_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\greek_pcp_el.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\install_left_image.bmp, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\isxdl.dll, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Japanese_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\korean_pcp_ko.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Norwegian_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\polish_pcp_pl.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\portugese_pcp_pt.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Portuguese_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\RegList.pcp, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\russian_pcp_ru.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Spanish_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\Swedish_pcp.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\TraditionalCn_pcp_zh-tw.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\turkish_pcp_tr.ini, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\unins000.exe, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\unins000.msg, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Program Files (x86)\PC Clean Plus\xmllite.dll, In Quarantäne, [945d95b7a0fabe78878ccd1c59aa857b], 
PUP.Optional.PCCleanPlus, C:\Windows\System32\Tasks\PC Clean Plus, In Quarantäne, [ac455eee4e4c63d349cb89606a9954ac], 
PUP.Optional.PCCleanPlus, C:\Windows\System32\Tasks\PC Clean Plus_DEFAULT, In Quarantäne, [bd342d1f0e8c9b9b9f750adf808325db], 
PUP.Optional.PCCleanPlus, C:\Windows\System32\Tasks\PC Clean Plus_UPDATES, In Quarantäne, [d021fe4ed3c74cea64b0ce1b42c1ad53], 
PUP.Optional.PCCleanPlus, C:\Windows\Tasks\PC Clean Plus_DEFAULT.job, In Quarantäne, [42af67e5a7f3e74f01145693f40f09f7], 
PUP.Optional.PCCleanPlus, C:\Windows\Tasks\PC Clean Plus_UPDATES.job, In Quarantäne, [6c85b3994e4c42f4fe17e90071929868], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\efo.exe.config, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\danish_efo_da.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\Dutch_efo_nl.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\english_efo_en.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\finish_efo_fi.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\French_efo_fr.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\german_efo_de.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\italian_efo_it.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\japanese_efo_ja.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\norwegian_efo_no.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\portuguese_efo_ptbr.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\russian_efo_ru.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\spanish_efo_es.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.EasyFileOpener, C:\Users\Anke\AppData\Roaming\efo\langs\swedish_efo_sv.ini, In Quarantäne, [6b86d379e3b70432b6cfbb4309faa65a], 
PUP.Optional.AdvancedPCCare, C:\Users\Public\Desktop\Advanced-PC-Care.lnk, In Quarantäne, [549de06cf8a286b06f4066686a9a40c0], 
PUP.Optional.AdvancedPCCare, C:\Windows\System32\Tasks\Advanced-PC-Care_Logon, In Quarantäne, [e9084a02524812240a973699877d41bf], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apc.db, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apcsrv.exe, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apcstartrepair_de.mp3, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\apcstartrepair_en.mp3, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\advancedpccare.net\Advanced-PC-Care\voice.ini, In Quarantäne, [668b6ae21d7d4aec19de2e94a35f9967], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\Errorlog.txt, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\exlist.bin, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\res.xml, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.AdvancedPCCare, C:\Users\Anke\AppData\Roaming\Advancedpccare.net\Advanced-PC-Care\srv.xml, In Quarantäne, [16dbc488afeb8bab599ee3df5ca69868], 
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus\PC Clean Plus entfernen.lnk, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f], 
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus\PC Clean Plus.lnk, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f], 
PUP.Optional.PCCleanPlus, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Clean Plus\Register PC Clean Plus.lnk, In Quarantäne, [28c95defb0ea290d0ee8784d7191b14f], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\apc.exe, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\apc.exe.config, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\ApcEng.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\AppRes.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\HtmlRenderer.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\HtmlRenderer.WinForms.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\Interop.IWshRuntimeLibrary.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\Microsoft.Win32.TaskScheduler.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\NAudio.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\System.Data.SQLite.DLL, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\TAFactory.IconPack.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\TaskScheduler.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\unins000.dat, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\unins000.exe, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\unins000.msg, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\danish_apc_da.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\Dutch_apc_nl.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\english_apc_en.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\finish_apc_fi.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\French_apc_fr.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\german_apc_de.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\italian_apc_it.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\japanese_apc_ja.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\norwegian_apc_no.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\portuguese_apc_ptbr.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\russian_apc_ru.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\spanish_apc_es.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\langs\swedish_apc_sv.ini, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x64\SQLite.Interop.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\Program Files\Advanced-PC-Care\x86\SQLite.Interop.dll, In Quarantäne, [ce23e864b4e675c1e0cd606e966e09f7], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-PC-Care\Advanced-PC-Care.lnk, In Quarantäne, [b63b58f4f9a1a4922a87e9e57b8911ef], 
PUP.Optional.AdvancedPCCare, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-PC-Care\kaufen Advanced-PC-Care.lnk, In Quarantäne, [b63b58f4f9a1a4922a87e9e57b8911ef], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\update.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\em.exe, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\eng_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\French_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\German_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\ininotfound0.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\ininotfound2.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\isxdl.dll, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\japan_em.ini, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\log_08-14-2016.log, In Quarantäne, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.EventMonitor, C:\Users\Anke\AppData\Roaming\Event Monitor\log_08-15-2016.log, Löschen bei Neustart, [a24fdc7076242610d761c8d59c682ad6], 
PUP.Optional.WinYahoo, C:\Users\Anke\AppData\Roaming\Mozilla\Firefox\Profiles\eez51ju3.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_), Ersetzt,[e01172da4a500f2765554e51be461ae6]
PUP.Optional.WinYahoo, C:\Users\Anke\AppData\Roaming\Mozilla\Firefox\Profiles\eez51ju3.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_ir_16_32_dopc&param1=1&param2=fErsetzt,[747dc389d7c3b482ceed049b6f9556aa]D1%26bErsetzt,[747dc389d7c3b482ceed049b6f9556aa]DFirefox%26ccErsetzt,[747dc389d7c3b482ceed049b6f9556aa]Dde%26paErsetzt,[747dc389d7c3b482ceed049b6f9556aa]DWinYahoo), %5
PUP.Optional.WinYahoo, C:\Users\Anke\AppData\Roaming\Mozilla\Firefox\Profiles\eez51ju3.default\searchplugins\yahoo! powered search.xml, In Quarantäne, [638eb29af9a1be786f79e7b4857fac54], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
habe die Bedrohungen in die Quarantäne geschickt und Notebook neu gestartet.

AdwClean intalliert und auch hier das Log:
Code:
ATTFilter
# AdwCleaner v6.000 - Bericht erstellt am 19/08/2016 um 16:34:56
# Aktualisiert am 12/08/2016 von ToolsLib
# Datenbank : 2016-08-19.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Anke - ANKE-PC
# Gestartet von : F:\Eigene Dokumente von Anke\Notebook\Software\Trojander Board\AdwCleaner\adwcleaner_6.000.exe
# Modus: Suchlauf
# Unterstützung : https://toolslib.net/forum



***** [ Dienste ] *****

Dienst Gefunden: LavasoftTcpService
Dienst Gefunden: WCAssistantService


***** [ Ordner ] *****

Ordner Gefunden: C:\Users\Anke\AppData\Roaming\lavasoft\web companion
Ordner Gefunden: C:\ProgramData\lavasoft\web companion
Ordner Gefunden: C:\ProgramData\Application Data\lavasoft\web companion
Ordner Gefunden: C:\Program Files (x86)\lavasoft\web companion


***** [ Dateien ] *****

Datei Gefunden: C:\WINDOWS\SysNative\LavasoftTcpService64.dll
Datei Gefunden: C:\WINDOWS\SysNative\LavasoftTcpServiceOff.ini
Datei Gefunden: C:\WINDOWS\SysWOW64\lavasofttcpservice.dll
Datei Gefunden: C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini


***** [ DLL ] *****

Keine infizierten DLLs gefunden.


***** [ WMI ] *****

Keine schädlichen Schlüssel gefunden.


***** [ Verknüpfungen ] *****

Keine infizierten Verknüpfungen gefunden.


***** [ Aufgabenplanung ] *****

Aufgabe Gefunden: RunAtStartup
Aufgabe Gefunden: RunAtStartup


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataContainer.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataController.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTable.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableFields.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.DataTableHolder.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.LSPLogic.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.ReadOnlyManager.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\LavasoftTcpServiceLib.WFPController.1
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
Schlüssel Gefunden: HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
Schlüssel Gefunden: HKU\S-1-5-21-2708279349-487291559-1233622218-1000\Software\Myfree Codec
Schlüssel Gefunden: HKU\S-1-5-21-2708279349-487291559-1233622218-1001\Software\PC
Schlüssel Gefunden: HKCU\Software\PC
Schlüssel Gefunden: HKLM\SOFTWARE\PC
Schlüssel Gefunden: HKLM\SOFTWARE\Lavasoft\Web Companion
Wert Gefunden: HKU\S-1-5-21-2708279349-487291559-1233622218-1001\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]
Wert Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Web Companion]
Schlüssel Gefunden: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com


***** [ Internetbrowser ] *****

Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2097 Bytes] - [21/12/2015 13:06:06]
C:\AdwCleaner\AdwCleaner[S1].txt - [1841 Bytes] - [21/12/2015 12:54:47]
C:\AdwCleaner\AdwCleaner[S2].txt - [4539 Bytes] - [19/08/2016 16:34:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [4612 Bytes] ##########
         
komisch kommt mir vor, daß ich gar nicht das komplette Fenster von AdwCleaner angezeigt bekomme, nach der Hälfte wird das Fenster abgeschnitten.
(alles was unter "Ergebnisse" angezeigt wird "Dienste","Ordner","Dateien"... sehe ich gar nicht mehr.

Könnt Ihr mir bitte weiterhelfen. Danke

 

Themen zu PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus
desktop, entfernen, explorer, firefox, infizierte, internet, internet explorer, log, löschen, malwarebytes, microsoft, monitor, mozilla, neustart, notebook, pc cleaner plus, server, setup, software, suche, system32, updates, websites, windows, wmi, yahoo




Ähnliche Themen: PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus


  1. Win 8.1: 2 Bedrohungen und 1 Warnung gefunden.
    Log-Analyse und Auswertung - 15.10.2015 (19)
  2. PC stürzt regelmäßig ab - Malwarebytes hat 19 Bedrohungen gefunden
    Plagegeister aller Art und deren Bekämpfung - 01.06.2015 (13)
  3. 16 Bedrohungen gefunden durch avast - URL:Mal auf Windows 8.1
    Log-Analyse und Auswertung - 22.05.2015 (18)
  4. PiccShare Updater & Snoozer.exe mit Malwarebyte u.a. gefunden
    Log-Analyse und Auswertung - 07.03.2015 (25)
  5. Windows 7: Über 200 Bedrohungen mit malwarebytes gefunden!
    Log-Analyse und Auswertung - 15.02.2015 (11)
  6. Mit mbam mehrere Bedrohungen gefunden.
    Plagegeister aller Art und deren Bekämpfung - 14.12.2014 (13)
  7. Malwarebyte: 5 potenz. Bedrohungen Antivensoftware 1 in Quarantäne nach download von converter freeware
    Plagegeister aller Art und deren Bekämpfung - 26.10.2014 (15)
  8. ESET hat Bedrohungen gefunden
    Log-Analyse und Auswertung - 23.09.2014 (7)
  9. Mit Antimalwarebytes potenzielle Bedrohungen gefunden
    Plagegeister aller Art und deren Bekämpfung - 14.07.2014 (26)
  10. Mit Malwarebyte gescannt und einiges gefunden.....
    Plagegeister aller Art und deren Bekämpfung - 11.06.2014 (9)
  11. Anti Vir EU Cleaner findet SChadsoftware im adwcleaner
    Plagegeister aller Art und deren Bekämpfung - 08.04.2014 (3)
  12. Mit Malwarebytes-Anti Malware 39 Bedrohungen gefunden
    Lob, Kritik und Wünsche - 07.01.2014 (0)
  13. Mit Malwarebytes-Anti Malware 39 Bedrohungen gefunden
    Plagegeister aller Art und deren Bekämpfung - 07.01.2014 (7)
  14. Malwarebyte hat Trojan.Ransom.Gen in ctfmon.Ink gefunden
    Plagegeister aller Art und deren Bekämpfung - 10.04.2013 (9)
  15. Verschiedene Bedrohungen mit MWB gefunden- Quarantäne - genügt das?
    Log-Analyse und Auswertung - 27.01.2013 (11)
  16. Malwarebyte 34 Pub.Blabbers gefunden
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (3)
  17. Taskmananger läuft nicht -Bedrohungen gefunden
    Log-Analyse und Auswertung - 23.07.2012 (2)

Zum Thema PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus - Moin zusammen, ich habe mir vermutlich beim Installieren von zusätzlichen Schriftarten dieses "PC Cleaner Plus" eingefangen. Nach der Suche auf der Trojaner-Board-Seite habe ich eine kurze Vorgehensweise-Anleitung gefunden. Malewarebyte hat - PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus...
Archiv
Du betrachtest: PC Cleaner Plus entfernen - Malwarebyte und AdwCleaner geben Bedrohungen gefunden aus auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.