Lenovo ideapad 100 - "Artemis" Virus - Internet stark verlangsamt, teilweise durch 100 Pop Ups blockiert

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.03.21.04
  rootkit: v2017.03.11.01

Windows 10 x64 NTFS
Internet Explorer 11.953.14393.0
Sissy Kraft :: LAPTOP-HFGO5N9Q [administrator]

21.03.2017 10:22:26
mbar-log-2017-03-21 (10-22-26).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 367779
Time elapsed: 51 minute(s), 37 second(s)

Memory Processes Detected: 1
C:\ProgramData\{9E712A69-29DA-9DC2-5BE9-B5104A6D3D37}\E81387BB-5FB8-3010-5565-8EB272C627F4.exe (Adware.Adposhel) -> 6740 -> Delete on reboot. [bfe9ac201098e650f5e3024d21df6898]

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 2
HKLM\SOFTWARE\WInterEn (Adware.Wajam) -> Delete on reboot. [e4c453798c1c69cdc08c909fca3833cd]
HKLM\SOFTWARE\WOW6432NODE\WInterEn (Adware.Wajam) -> Delete on reboot. [e6c25379f5b39f97c6862f004cb67c84]

Registry Values Detected: 4
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{0701b86a-4c87-49c0-9167-2514fa6c0b26}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [c3e5824a05a395a1c53602e610f314ec]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{134b74e4-91e6-411d-9909-a011dd01084e}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [f4b47e4ed9cf0f27a259da0e3fc454ac]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{e8c13548-e93f-467c-b57c-d88ed3e5e09a}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [6048f7d57335af879764499f996af60a]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{fe581442-a8c1-4208-8f13-7070424cfd62}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [cbdd3696d6d214226a916880e0237c84]

Registry Data Items Detected: 1
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer (Trojan.DNSChanger.ACMB2) -> Bad: (82.163.143.176 82.163.142.178) Good: (8.8.8.8) -> Replace on reboot. [f8b01eae9f0965d1b40cfb3fbe46827e]

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\ProgramData\{9E712A69-29DA-9DC2-5BE9-B5104A6D3D37}\E81387BB-5FB8-3010-5565-8EB272C627F4.exe (Adware.Adposhel) -> Delete on reboot. [bfe9ac201098e650f5e3024d21df6898]
C:\ProgramData\8b04d0a1\965fde74.dll (Adware.Elex) -> Delete on reboot. [33752ca09e0a56e02ebf21e35ca51de3]

Physical Sectors Detected: 0
(No malicious items detected)

(end)