Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: Malwarebytes Version 3

Downloade Dir bitte Malwarebytes Anti-Malware 3

• Installiere das Programm in den vorgegebenen Pfad.
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM nach dem Neustart, klicke auf Berichte.
• Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
• Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

Downloade Dir bitte ESET Online Scanner (Bebilderte Anleitung)

• Starte die Installationsdatei.
• Akzeptiere die Nutzungsbedingungen.
• Wähle Erkennung evtl. unerwünschter Anwendungen aktivieren aus und klicke auf Scannen.
• Zuerst werden die notwendigen Signaturen heruntergeladen, anschließend startet ESET automatisch den Suchlauf.
• Am Ende des Suchlaufs werden gegebenenfalls die gefundenen Elemente aufgelistet.
• Schließe den ESET Online Scanner rechts oben [ X ] und klicke anschließend auf Schließen.
• Drücke bitte die Tastenkombination WIN+R zum Ausführen und kopiere folgenden Text in die Zeile und drücke im Anschluss auf OK:
  

  notepad "%tmp%\log.txt"
           

• Kopiere den gesamten Text mittels STRG+A und STRG+C hier in deine Antwort in CODE-Tags

3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Namt,
so das sind die 3 logfiles.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2/10/18
Scan Time: 9:02 PM
Log File: 64b8f976-0e9d-11e8-9c7a-8c89a53586cf.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.262
Update Package Version: 1.0.3913
License: Trial

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: juergen2-PC\Administrator

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 353896
Threats Detected: 12
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 35 min, 10 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 3
PUP.Optional.WebBar, HKLM\SOFTWARE\MICROSOFT\TRACING\winwb_RASAPI32, No Action By User, [3420], [262291],1.0.3913
PUP.Optional.WebBar, HKLM\SOFTWARE\MICROSOFT\TRACING\winwb_RASMANCS, No Action By User, [3420], [262291],1.0.3913
PUP.Optional.MediaPlayAir, HKU\S-1-5-21-963683855-2343051469-89585254-1000\SOFTWARE\UNDEFINED, No Action By User, [1055], [334354],1.0.3913

Registry Value: 1
PUP.Optional.MediaPlayAir, HKU\S-1-5-21-963683855-2343051469-89585254-1000\SOFTWARE\UNDEFINED|FLASHPLAYERPRO.EXE, No Action By User, [1055], [334354],1.0.3913

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.WebBar, C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\WEBBAR, No Action By User, [3420], [254551],1.0.3913
PUP.Optional.MindSpark.Generic, C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IV2HA52P.DEFAULT-1508386149418\BROWSER-EXTENSION-DATA\_f7Members_@download.smsfrombrowser.com, No Action By User, [1389], [468075],1.0.3913
PUP.Optional.MindSpark.Generic, C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IV2HA52P.DEFAULT-1508386149418\BROWSER-EXTENSION-DATA\_j5Members_@ext.ask.com, No Action By User, [1389], [468075],1.0.3913

File: 5
PUP.Optional.StartPage24, C:\USERS\JUERGEN2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PXIDV9QV.DEFAULT-1475719002037\EXTENSIONS\FFEXT_BASICVIDEOEXT@STARTPAGE24.XPI, No Action By User, [11359], [186354],1.0.3913
PUP.Optional.WebBar, C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\WEBBAR\WB.LOG, No Action By User, [3420], [254551],1.0.3913
PUP.Optional.MindSpark.Generic, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\iv2ha52p.default-1508386149418\browser-extension-data\_f7Members_@download.smsfrombrowser.com\storage.js, No Action By User, [1389], [468075],1.0.3913
PUP.Optional.MindSpark.Generic, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\iv2ha52p.default-1508386149418\browser-extension-data\_j5Members_@ext.ask.com\storage.js, No Action By User, [1389], [468075],1.0.3913
PUP.Optional.TweakBit, C:\USERS\JUERGEN2\DOWNLOADS\ASUS-DRIVER-UPDATER.EXE, No Action By User, [1109], [427277],1.0.3913

Physical Sector: 0
(No malicious items detected)


(end)
         

Nach Eset lauf nicht alle säubern?

21:58:54 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=fe88f06444b38c4f9ba0dd1c8411570b
# end=init
# utc_time=2018-02-10 20:58:53
# local_time=2018-02-10 21:58:53 (+0100, W. Europe Standard Time)
# country="Austria"
# osver=6.1.7601 NT Service Pack 1
21:59:20 Updating
21:59:20 Update Init
21:59:23 Update Download
22:12:13 esets_scanner_update returned -1 esets_gle=12
22:12:13 Update Finalize
22:12:13 Call m_esets_charon_send
22:12:13 Call m_esets_charon_destroy
22:12:13 Retrying Update
22:12:13 Updating
22:12:13 Update Init
22:12:22 Update Download
22:22:54 esets_scanner_reload returned 0
22:22:54 g_uiModuleBuild: 36359
22:22:54 Update Finalize
22:22:54 Call m_esets_charon_send
22:22:54 Call m_esets_charon_destroy
22:22:54 Updated modules version: 36359
22:23:06 Call m_esets_charon_setup_create
22:23:06 Call m_esets_charon_create
22:23:06 m_esets_charon_create OK
22:23:06 Call m_esets_charon_start_send_thread
22:23:06 Call m_esets_charon_setup_set
22:23:06 m_esets_charon_setup_set OK
22:23:06 Scanner engine: 36359
00:21:24 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=fe88f06444b38c4f9ba0dd1c8411570b
# end=init
# utc_time=2018-02-10 23:21:24
# local_time=2018-02-11 00:21:24 (+0100, W. Europe Standard Time)
# country="Austria"
# osver=6.1.7601 NT Service Pack 1
00:21:48 Call m_esets_charon_setup_create
00:21:48 Call m_esets_charon_create
00:21:48 m_esets_charon_create OK
00:21:48 Call m_esets_charon_start_send_thread
00:21:48 Call m_esets_charon_setup_set
00:21:48 m_esets_charon_setup_set OK
00:22:03 Updating
00:22:03 Update Init
00:22:15 Call m_esets_charon_setup_create
00:22:15 Call m_esets_charon_create
00:22:15 m_esets_charon_setup_set ERROR
00:22:15 Update Download
00:22:45 esets_scanner_reload returned 0
00:22:45 g_uiModuleBuild: 36361
00:22:45 Update Finalize
00:22:45 Call m_esets_charon_send
00:22:45 Call m_esets_charon_destroy
00:22:45 Updated modules version: 36361
00:22:57 Call m_esets_charon_setup_create
00:22:57 Call m_esets_charon_create
00:22:57 m_esets_charon_setup_set ERROR
00:22:57 Scanner engine: 36361
00:23:11 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=fe88f06444b38c4f9ba0dd1c8411570b
# end=init
# utc_time=2018-02-10 23:23:10
# local_time=2018-02-11 00:23:10 (+0100, W. Europe Standard Time)
# country="Austria"
# osver=6.1.7601 NT Service Pack 1
14:37:39 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=fe88f06444b38c4f9ba0dd1c8411570b
# engine=36361
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# sfx_checked=true
# utc_time=2018-02-11 13:37:39
# local_time=2018-02-11 14:37:39 (+0100, W. Europe Standard Time)
# country="Austria"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 2077801 57100673 0 0
# scanned=2
# found=19
# cleaned=0
# scan_time=51292
sh=BCF5D848ACC5FAAC74302A58198BF23043A4D988 ft=1 fh=0000000000000000 vn="Variante von MSIL/WebBar.C eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\cqzjswczuapwoyeuzvyibkudzgvnrnln\5.5.6347.24995\winwb.exe"
sh=0B45DF4F398972E1D47263399E2298AE7D5FA83E ft=1 fh=0000000000000000 vn="Variante von MSIL/ByteFence.A eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\dbgsxusyjhwhcmswwnoazjmlthsmcgtg\ByteFence.exe"
sh=B88960DFA4A3D5C6BAEADB75FB444B8792E3A7E5 ft=1 fh=0000000000000000 vn="Variante von MSIL/ByteFence.A eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\dbgsxusyjhwhcmswwnoazjmlthsmcgtg\rsEngine.dll"
sh=4B5EBE6B210950F1BA9DE6BF162BD471FDCCBF2D ft=1 fh=0000000000000000 vn="Variante von MSIL/WebCompanion.D eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\dbhshyssdbjjczbuahwwwegacvmpfjwj\Application\Lavasoft.Utils.dll"
sh=5B448F160FD649D12ECD460481097A84BA7B6D47 ft=1 fh=0000000000000000 vn="Variante von MSIL/WebCompanion.D eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\dbhshyssdbjjczbuahwwwegacvmpfjwj\Application\Lavasoft.WCAssistant.WinService.exe"
sh=C1E35F3A64EE4EB0729AA4BA5A123771DEBC680D ft=1 fh=0000000000000000 vn="Variante von MSIL/WebCompanion.D eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\dbhshyssdbjjczbuahwwwegacvmpfjwj\Application\WebCompanion.exe"
sh=3CC699DBC82C024AF463A9DA76DE42C8C56E4D47 ft=1 fh=0000000000000000 vn="Variante von MSIL/WebCompanion.C eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\dbhshyssdbjjczbuahwwwegacvmpfjwj\Application\WebCompanionInstaller.exe"
sh=2706C0FE08AE19CC659D69A89D06A2BB4FAF2527 ft=0 fh=0000000000000000 vn="JS/Mindspark.B eventuell unerwünschte Anwendung,JS/Mindspark.D eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\xqmnbqdrovoyxfvvvxdddzxaenawkxim\chrome\ffxtbr.jar"
sh=D1844E06611DF2F24F1DECAE4D2FE5644A968FCE ft=1 fh=0000000000000000 vn="Variante von Win32/Visicom.B eventuell unerwünschte Anwendung" ac=I fn="C:\datas\ManyCamWebInstaller_5.3.0.exe"
sh=881F02D49C5A24B46BDBB28AACE0F89A80E2AE08 ft=1 fh=0000000000000000 vn="Variante von Win32/Auslogics.A eventuell unerwünschte Anwendung" ac=I fn="C:\Users\juergen2\Downloads\ASUS-driver-updater.exe"
sh=F57799CC65C669293300AB75F78DB0E3AACFBED3 ft=1 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.A eventuell unerwünschte Anwendung" ac=I fn="H:\dateien\XAMPP - CHIP-Downloader.exe"
sh=2EB1300E6FEDA1163A6D29C3A60A19C9285BE48A ft=1 fh=0000000000000000 vn="Win32/Toolbar.Montiera.I eventuell unerwünschte Anwendung,Variante von Win32/Toolbar.Escort.A eventuell unerwünschte Anwendung,Variante von Win32/Toolbar.Montiera.A eventuell unerwünschte Anwendung,Variante von Win32/Toolbar.Montiera.F eventuell unerwünschte Anwendung" ac=I fn="H:\olduser\juergi\Desktop\softonic_ggl_1.5.11.5.exe"
sh=9138D8BA1A4445001ECBD145EE8083EB74B03BC8 ft=0 fh=0000000000000000 vn="LNK/Agent.CH Trojaner" ac=I fn="H:\torrent\www.blockbusters.cc...Dornenvögel-2\Firstload.de - Dein Gratis UseNext Account.URL"
sh=9138D8BA1A4445001ECBD145EE8083EB74B03BC8 ft=0 fh=0000000000000000 vn="LNK/Agent.CH Trojaner" ac=I fn="H:\torrent\www.blockbusters.cc...Dornenvögel-3\Firstload.de - Dein Gratis UseNext Account.URL"
sh=78139C63DFC40F5C4ED2247782BB44EF827A13E1 ft=0 fh=0000000000000000 vn="Java/TrojanDownloader.Agent.NBB Trojaner" ac=I fn="I:\BackupSucama\httpdocs\mirror\mirror\backup\_SUCAMAFORUM_20161113.tgz"
sh=2795B32AFB95ADAFFABB1DF36D4419E9E6E0E410 ft=0 fh=0000000000000000 vn="Java/TrojanDownloader.Agent.NBB Trojaner" ac=I fn="I:\BackupSucama\httpdocs\mirror\mirror\backup\_SUCAMAFORUM_20161125.tgz"
sh=D25113CF5A89275F1F54FF8173D457FDD468A82E ft=0 fh=0000000000000000 vn="Variante von Win32/SmartTweak.A eventuell unerwünschte Anwendung,ist OK" ac=I fn="I:\div\install\msql.dll.zip"
sh=FCAC8027E9F7E15672C679A2ED05D55C2365B93E ft=0 fh=0000000000000000 vn="Variante von Win32/Auslogics.A eventuell unerwünschte Anwendung,ist OK" ac=I fn="I:\JUERGEN2-PC\Backup Set 2016-10-25 212418\Backup Files 2016-11-06 190005\Backup files 6.zip"
sh=4EEA2FEF6DF29F2115B2C595361A6E9C4A7FAF28 ft=0 fh=0000000000000000 vn="Variante von Win32/Auslogics.A eventuell unerwünschte Anwendung" ac=I fn="I:\JUERGEN2-PC\Backup Set 2016-12-11 190004\Backup Files 2016-12-11 190004\Backup files 23.zip"
         

 Results of screen317's Security Check version 1.009  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 28.0.0.137  
 Mozilla Thunderbird (52.6.0) 
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 data esetonlinescanner_deu.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 0% 
````````````````````End of Log``````````````````````
         

Es hat sich Malwarebytes von selber gemeldet und ich habe alle quarantined und deleted.
hoffe das ist ok..

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2/12/18
Scan Time: 2:18 AM
Log File: ac27620c-0f92-11e8-a05d-8c89a53586cf.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.262
Update Package Version: 1.0.3920
License: Trial

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 353995
Threats Detected: 11
Threats Quarantined: 11
Time Elapsed: 55 min, 25 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 3
PUP.Optional.MediaPlayAir, HKU\S-1-5-21-963683855-2343051469-89585254-1000\SOFTWARE\UNDEFINED, Quarantined, [1056], [334354],1.0.3920
PUP.Optional.WebBar, HKLM\SOFTWARE\MICROSOFT\TRACING\winwb_RASAPI32, Quarantined, [3421], [262291],1.0.3920
PUP.Optional.WebBar, HKLM\SOFTWARE\MICROSOFT\TRACING\winwb_RASMANCS, Quarantined, [3421], [262291],1.0.3920

Registry Value: 1
PUP.Optional.MediaPlayAir, HKU\S-1-5-21-963683855-2343051469-89585254-1000\SOFTWARE\UNDEFINED|FLASHPLAYERPRO.EXE, Quarantined, [1056], [334354],1.0.3920

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.MindSpark.Generic, C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IV2HA52P.DEFAULT-1508386149418\BROWSER-EXTENSION-DATA\_f7Members_@download.smsfrombrowser.com, Quarantined, [1390], [468075],1.0.3920
PUP.Optional.MindSpark.Generic, C:\USERS\ADMINISTRATOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IV2HA52P.DEFAULT-1508386149418\BROWSER-EXTENSION-DATA\_j5Members_@ext.ask.com, Quarantined, [1390], [468075],1.0.3920
PUP.Optional.WebBar, C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\WEBBAR, Quarantined, [3421], [254551],1.0.3920

File: 4
PUP.Optional.StartPage24, C:\USERS\JUERGEN2\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PXIDV9QV.DEFAULT-1475719002037\EXTENSIONS\FFEXT_BASICVIDEOEXT@STARTPAGE24.XPI, Quarantined, [11366], [186354],1.0.3920
PUP.Optional.MindSpark.Generic, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\iv2ha52p.default-1508386149418\browser-extension-data\_f7Members_@download.smsfrombrowser.com\storage.js, Quarantined, [1390], [468075],1.0.3920
PUP.Optional.MindSpark.Generic, C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\iv2ha52p.default-1508386149418\browser-extension-data\_j5Members_@ext.ask.com\storage.js, Quarantined, [1390], [468075],1.0.3920
PUP.Optional.WebBar, C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\WEBBAR\WB.LOG, Quarantined, [3421], [254551],1.0.3920

Physical Sector: 0
(No malicious items detected)


(end)