Trojaner eingefangen. Jetzt werde ich sie nicht mehr los.

<?xml version="1.0" encoding="UTF-16"?>

-<mbam-log>


-<header>

<date>2016/09/28 05:12:36 +0200</date>

<logfile>mbam-log-2016-09-28 (05-12-33).xml</logfile>

<isadmin>yes</isadmin>

</header>


-<engine>

<version>2.2.1.1043</version>

<malware-database>v2016.09.28.02</malware-database>

<rootkit-database>v2016.09.26.02</rootkit-database>

<license>free</license>

<file-protection>disabled</file-protection>

<web-protection>disabled</web-protection>

<self-protection>disabled</self-protection>

</engine>


-<system>

<hostname>ANNAS-COMPUTER</hostname>

<ip>192.168.0.10</ip>

<osversion>Windows 10</osversion>

<arch>x64</arch>

<username>Anna</username>

<filesys>NTFS</filesys>

</system>


-<summary>

<type>threat</type>

<result>completed</result>

<objects>330805</objects>

<time>1009</time>

<processes>2</processes>

<modules>0</modules>

<keys>4</keys>

<values>2</values>

<datas>0</datas>

<folders>2</folders>

<files>12</files>

<sectors>0</sectors>

</summary>


-<options>

<memory>enabled</memory>

<startup>enabled</startup>

<filesystem>enabled</filesystem>

<archives>enabled</archives>

<rootkits>disabled</rootkits>

<deeprootkit>disabled</deeprootkit>

<heuristics>enabled</heuristics>

<pup>enabled</pup>

<pum>enabled</pum>

</options>


-<items>


-<process>

<path>C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe</path>

<vendor>Trojan.Dropper</vendor>

<action/>

<pid>2176</pid>

<hash>d8aaa8cf3169d066b83621c9c93bf30d</hash>

</process>


-<process>

<path>C:\Users\Anna\AppData\Roaming\Browser-Security\s768.exe</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<pid>7252</pid>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</process>


-<key>

<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\rtop</path>

<vendor>Trojan.Dropper</vendor>

<action/>

<hash>d8aaa8cf3169d066b83621c9c93bf30d</hash>

</key>


-<key>

<path>HKU\S-1-5-21-3481808792-711872996-1890492757-1001\SOFTWARE\csastats</path>

<vendor>PUP.Optional.InstallCore</vendor>

<action/>

<hash>97ebc7b03f5bd2647016c8322dd6f709</hash>

</key>


-<key>

<path>HKU\S-1-5-21-3481808792-711872996-1890492757-1001\SOFTWARE\PRODUCTSETUP</path>

<vendor>PUP.Optional.ProductSetup</vendor>

<action/>

<hash>7d0520577e1c8aac6859dcd49073956b</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Browser-Security</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</key>


-<value>

<path>HKU\S-1-5-21-3481808792-711872996-1890492757-1001\SOFTWARE\PRODUCTSETUP</path>

<valuename>tb</valuename>

<vendor>PUP.Optional.ProductSetup</vendor>

<action/>

<valuedata>0K2Y1J1E2T1S2X0X0Z1S1N1C2S1G</valuedata>

<hash>7d0520577e1c8aac6859dcd49073956b</hash>

</value>


-<value>

<path>HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN</path>

<valuename>safe_urls768</valuename>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<valuedata>"C:\Users\Anna\AppData\Roaming\Browser-Security\s768.exe"</valuedata>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</value>


-<folder>

<path>C:\Users\Anna\AppData\Roaming\Browser-Security</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</folder>


-<folder>

<path>C:\Program Files\Booking.COM</path>

<vendor>PUP.Optional.Booking</vendor>

<action/>

<hash>433fe88f0199d4622bad7841e2225aa6</hash>

</folder>


-<file>

<path>C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe</path>

<vendor>Trojan.Dropper</vendor>

<action/>

<hash>d8aaa8cf3169d066b83621c9c93bf30d</hash>

</file>


-<file>

<path>C:\Users\Anna\Downloads\KingoRoot.exe</path>

<vendor>PUP.Optional.BundleInstaller</vendor>

<action/>

<hash>a4deeb8c0b8f93a389ac47a0ef158878</hash>

</file>


-<file>

<path>C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\i609z8c2.default\extensions\firefox@browser-security.de.xpi</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>800210673763a0964ebe13b152b17c84</hash>

</file>


-<file>

<path>C:\Users\Anna\AppData\Roaming\Browser-Security\data</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</file>


-<file>

<path>C:\Users\Anna\AppData\Roaming\Browser-Security\license.rtf</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</file>


-<file>

<path>C:\Users\Anna\AppData\Roaming\Browser-Security\s768.exe</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</file>


-<file>

<path>C:\Users\Anna\AppData\Roaming\Browser-Security\uninstall.exe</path>

<vendor>PUP.Optional.BrowserSecurity</vendor>

<action/>

<hash>c7bba9ce7f1b47ef03585e64eb17ed13</hash>

</file>


-<file>

<path>C:\Program Files\Booking.COM\Booking.com.lnk</path>

<vendor>PUP.Optional.Booking</vendor>

<action/>

<hash>433fe88f0199d4622bad7841e2225aa6</hash>

</file>


-<file>

<path>C:\Program Files\Booking.COM\Booking.ico</path>

<vendor>PUP.Optional.Booking</vendor>

<action/>

<hash>433fe88f0199d4622bad7841e2225aa6</hash>

</file>


-<file>

<path>C:\Program Files\Booking.COM\StartURL.exe</path>

<vendor>PUP.Optional.Booking</vendor>

<action/>

<hash>433fe88f0199d4622bad7841e2225aa6</hash>

</file>


-<file>

<path>C:\Program Files\Booking.COM\Version.txt</path>

<vendor>PUP.Optional.Booking</vendor>

<action/>

<hash>433fe88f0199d4622bad7841e2225aa6</hash>

</file>


-<file>

<path>C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\i609z8c2.default\user.js</path>

<vendor>PUM.Optional.FireFoxSecurityOverride</vendor>

<action/>

<hash>3c465c1b9901f2443112ebb17c88956b</hash>

</file>

</items>

</mbam-log>