Lenovo ideapad 100 - "Artemis" Virus - Internet stark verlangsamt, teilweise durch 100 Pop Ups blockiert

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 28.03.17
Scan-Zeit: 13:16
Protokolldatei: mbam.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.6.1469
Komponentenversion: 1.0.75
Version des Aktualisierungspakets: 1.0.1613
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: LAPTOP-HFGO5N9Q\Sissy Kraft

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 443504
Abgelaufene Zeit: 18 Min., 12 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{8b04d0a1}, In Quarantäne, [46], [260250],1.0.1613

Registrierungswert: 1
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{8b04d0a1}|1, In Quarantäne, [46], [260250],1.0.1613

Registrierungsdaten: 6
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer, Ersetzt, [46], [-1],0.0.0
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|DhcpNameServer, Ersetzt, [46], [-1],0.0.0
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b}|NameServer, Ersetzt, [46], [-1],0.0.0
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{9cecb963-00d1-45a6-88b3-5b6eb46d788c}|NameServer, Ersetzt, [46], [-1],0.0.0
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{dad896a8-b1d6-4847-a341-6d25cd607ce4}|NameServer, Ersetzt, [46], [-1],0.0.0
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{e8c13548-e93f-467c-b57c-d88ed3e5e09a}|DhcpNameServer, Ersetzt, [46], [-1],0.0.0

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 2
PUP.Optional.InternetMonitor, C:\Users\Sissy Kraft\AppData\Local\CrashRpt\UnsentCrashReports\BandwidthStat_345\Logs, In Quarantäne, [15336], [182462],1.0.1613
PUP.Optional.InternetMonitor, C:\USERS\SISSY KRAFT\APPDATA\LOCAL\CRASHRPT\UNSENTCRASHREPORTS\BandwidthStat_345, In Quarantäne, [15336], [182462],1.0.1613

Datei: 1
PUP.Optional.DownloadAssist, C:\USERS\SISSY KRAFT\DOWNLOADS\FIREFOX_SETUP.EXE, In Quarantäne, [20034], [300914],1.0.1613

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
         

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9944a9465b8b0748ab02dfd0d6b3f5d9
# end=init
# utc_time=2017-03-28 11:51:50
# local_time=2017-03-28 01:51:50 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 32869
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9944a9465b8b0748ab02dfd0d6b3f5d9
# end=updated
# utc_time=2017-03-28 11:56:58
# local_time=2017-03-28 01:56:58 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=9944a9465b8b0748ab02dfd0d6b3f5d9
# engine=32869
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-03-28 02:26:19
# local_time=2017-03-28 04:26:19 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 9576 22041793 0 0
# scanned=351470
# found=2
# cleaned=0
# scan_time=8960
sh=6E57DFA0662AA4627625D2A936DED441339EB73B ft=1 fh=e2a660d6698e4396 vn="Variante von Win64/Wajam.G eventuell unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\c8e96bbb1a08efab969bf4636ca18d6a\5eb51548d2a56b09b9ac3b354e3c09f6.exe"
sh=6E57DFA0662AA4627625D2A936DED441339EB73B ft=1 fh=e2a660d6698e4396 vn="Variante von Win64/Wajam.G eventuell unerwünschte Anwendung" ac=I fn="C:\Program Files\b203e63165420d0e77fca884a50520ad\5eb51548d2a56b09b9ac3b354e3c09f6.exe.patcher"
         

 Results of screen317's Security Check version 1.009  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 	25.0.0.127  
 Mozilla Firefox (52.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSMpEng.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamtray.exe  
 Windows Defender MSASCuiL.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````