Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   Webseiten laden sehr langsam bis gar nicht (https://www.trojaner-board.de/160575-webseiten-laden-sehr-langsam-gar.html)

cosinus 11.11.2014 14:00
Avira deaktivieren, Fix wiederholen

tiffany1963 11.11.2014 17:46
Schönen guten Abend ... wollte mal zwischendurch anmerken, dass das hier wirklich ein erstklassiger Service ist. Vielen lieben Dank :knuddel:


Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-11-2014 01
Ran by user at 2014-11-11 17:29:32 Run:2
Running from C:\Users\user\Downloads
Loaded Profile: user (Available profiles: user)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
ProxyServer: http=127.0.0.1:53241;https=127.0.0.1:53241
 Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\security@protegere.org [Not Found]
FF Extension: No Name - C:\Program Files\IObit Apps Toolbar\FF [Not Found]
FF Extension: No Name - security@protegere.org [Not Found]
S3 esgiguard; No ImagePath
Task: {578FCE1C-F6E8-4D6B-8A0F-068CE08DA971} - \Driver Booster SkipUAC (user) No Task File <==== ATTENTION
Task: {9A41A18D-E192-4526-BA37-C31AC179D3AA} - \Driver Booster SkipUAC (SYSTEM) No Task File <==== ATTENTION
EmptyTemp:
Hosts:
*****************

HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallDeleteDir => Value not found.
"C:\Windows\system32\GroupPolicy\Machine" => File/Directory not found.
"HKLM\SOFTWARE\Policies\Google" => Key not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value not found.
Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\security@protegere.org [Not Found] => Error: No automatic fix found for this entry.
C:\Program Files\IObit Apps Toolbar\FF => not found.
FF Extension: No Name - security@protegere.org [Not Found] => not found.
esgiguard => Service not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{578FCE1C-F6E8-4D6B-8A0F-068CE08DA971}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (user)" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A41A18D-E192-4526-BA37-C31AC179D3AA}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (SYSTEM)" => Key not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 26.7 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

cosinus 11.11.2014 22:28
Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


tiffany1963 12.11.2014 00:10
Code:
<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2014/11/11 22:52:06 +0100</date>
<logfile>mbam-log-2014-11-11 (22-52-04).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.00.3.1025</version>
<malware-database>v2014.11.11.09</malware-database>
<rootkit-database>v2014.11.11.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x86</arch>
<username>user</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>335948</objects>
<time>2115</time>
<processes>0</processes>
<modules>0</modules>
<keys>1</keys>
<values>0</values>
<datas>0</datas>
<folders>2</folders>
<files>10</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39B931CF-F1E2-4D04-8129-9EE8159A91C5}</path><vendor>PUP.Optional.SavingsWizard.A</vendor><action>success</action><hash>8df877c35329c96d5922a8113fc39c64</hash></key>
<folder><path>C:\Temp</path><vendor>PUP.Optional.AdPeak.A</vendor><action>success</action><hash>dca95cde5b21290d05aaada1f90a2fd1</hash></folder>
<folder><path>C:\Temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}</path><vendor>PUP.Optional.AdPeak.A</vendor><action>success</action><hash>dca95cde5b21290d05aaada1f90a2fd1</hash></folder>
<file><path>C:\Temp\InstallFilter32.msi</path><vendor>PUP.Optional.AdPeak.A</vendor><action>success</action><hash>32534bef027a15216f3741fce719db25</hash></file>
<file><path>C:\Temp\t.msi</path><vendor>PUP.Optional.SupraSavings.A</vendor><action>success</action><hash>63221525304c7bbba686c74da46101ff</hash></file>
<file><path>C:\Users\user\Downloads\SoftonicDownloader_fuer_advanced-systemcare.exe</path><vendor>PUP.Optional.Softonic.A</vendor><action>success</action><hash>fd88c674304c6ec805e8bd7b4cb549b7</hash></file>
<file><path>C:\Users\user\Downloads\TCPOptimizer (1).exe</path><vendor>PUP.Optional.DownloadGuide</vendor><action>success</action><hash>2b5a84b64c30c96d5a5a20c08e733dc3</hash></file>
<file><path>C:\Windows\Installer\6d2d2ff.msi</path><vendor>PUP.Optional.SupraSavings.A</vendor><action>success</action><hash>d7ae6bcf74081d198ba1bb59a362eb15</hash></file>
<file><path>C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\toolbar_ORJ-SPE@apn.ask.com.xpi</path><vendor>PUP.Optional.Ask.A</vendor><action>success</action><hash>ed981a205b21b87e1b21003d996af10f</hash></file>
<file><path>C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Browse and Search the Internet.lnk</path><vendor>PUP.Optional.Linkey</vendor><action>success</action><hash>11744ded17659f97dbaf46f9f50ee818</hash></file>
<file><path>C:\Temp\lsp2.log</path><vendor>PUP.Optional.AdPeak.A</vendor><action>success</action><hash>dca95cde5b21290d05aaada1f90a2fd1</hash></file>
<file><path>C:\Temp\pictures001.tif</path><vendor>PUP.Optional.AdPeak.A</vendor><action>success</action><hash>dca95cde5b21290d05aaada1f90a2fd1</hash></file>
<file><path>C:\Temp\t.txt</path><vendor>PUP.Optional.AdPeak.A</vendor><action>success</action><hash>dca95cde5b21290d05aaada1f90a2fd1</hash></file>
</items>
</mbam-log>
Guten Abend,

ESET initialisiert nicht ... es kommt folgende Meldung:
Updates funktionieren nicht. Ist ein Proxy eingerichtet?

Proxy ist ausgeschaltet, da Vodafone keinen Proxy verwendet.

Was soll ich jetzt machen?

cosinus 12.11.2014 10:11
Windows neu starten, ESET nochmal probieren

tiffany1963 12.11.2014 10:34
Das Problem besteht weiterhin :dummguck:

cosinus 12.11.2014 11:05
Neue FRST Logs bitte posten

tiffany1963 12.11.2014 13:03

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-11-2014 01
Ran by user (administrator) on USER-PC on 12-11-2014 12:55:38
Running from C:\Users\user\Downloads
Loaded Profile: user (Available profiles: user)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\NielsenUpdate.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Telefónica I+D) C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira) C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\nielsenonline.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(The Nielsen Company) C:\Program Files\NetRatingsNetSight\NetSight\nielsenonline.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(1und1 Mail und Media GmbH) C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe
(IObit) C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files\IObit\Advanced SystemCare 7\RealTimeProtector.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NielsenOnline] => C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.exe [91872 2014-09-03] (The Nielsen Company)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703736 2014-09-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [MailCheck IE Broker] => C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [1810496 2014-04-24] (1und1 Mail und Media GmbH)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1942424 2014-10-10] (APN)
HKU\S-1-5-18\...\Run: [AviraSpeedup] => C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe [5395192 2014-10-25] (Avira)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.online-doppelkopf.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7BB920037B4CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-4249131668-4266709875-3981103518-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKCU - DefaultScope {1E829948-B7BA-4F8D-913C-3768F5CA6267} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=8ffa2a1b-2dd6-4664-aeb1-deca7fb525a7&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - {1E829948-B7BA-4F8D-913C-3768F5CA6267} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=8ffa2a1b-2dd6-4664-aeb1-deca7fb525a7&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {3A732CFF-0553-4894-9210-E7D1C8AC348D} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {59D4B146-D8FA-435F-8EEE-4F6431B26E83} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {6E4B0881-E464-45DB-98B0-B44FE376E9C0} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKCU - {AFF993C1-B509-4057-AD10-2A6CC55D533B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {FAEAE76C-6B31-4F7A-BFCD-0CF18A0866A7} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: WEB.DE MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll (1und1 Mail und Media GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default
FF DefaultSearchUrl: https://de.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF SelectedSearchEngine: Google
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @MoneyMillionaire/npdf -> C:\ProgramData\Rabatt-Finder\FFExtension20140906003825\plugins\npdf.dll No File
FF Plugin: @nielsen/FirefoxTracker -> C:\Program Files\NetRatingsNetSight\NetSight\meter3\FirefoxAddOns\npfirefoxtracker.dll (Nielsen)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\user\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\searchplugins\yahoo-avast.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\ddg.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\Extensions\abs@avira.com [2014-11-08]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\Extensions\ascsurfingprotection@iobit.com [2014-09-06]
FF Extension: Settings Manager - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\Extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F} [2014-05-26]
FF HKLM\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files\NetRatingsNetSight\NetSight\meter3\FirefoxAddOns\netsight@nielsen.xpi
FF Extension: Nielsen NetSight - C:\Program Files\NetRatingsNetSight\NetSight\meter3\FirefoxAddOns\netsight@nielsen.xpi [2014-11-12]
FF Extension: No Name - netsight@nielsen.com [Not Found]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.online-doppelkopf.com/
CHR StartupUrls: Default -> "hxxp://www.online-doppelkopf.com/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Nielsen) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\amebgbgmoldiehbbbjcaoceilcfnniop [2014-11-12]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-26]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-27]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-26]
CHR Extension: (Google-Suche) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-26]
CHR Extension: (Avira Browser Safety) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-10-29]
CHR Extension: (WEB.DE MailCheck) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-10-26]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-26]
CHR Extension: (Google Mail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-26]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [893216 2014-08-18] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400 2011-07-05] (Advanced Micro Devices, Inc.) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-10-10] (APN LLC.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1817088 2010-12-27] (Realsil Microelectronics Inc.) [File not signed]
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2283296 2014-10-17] (IObit)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [503080 2010-05-04] (Nero AG)
R2 NielsenUpdate; C:\Program Files\NetRatingsNetSight\NetSight\NielsenUpdate.exe [2932448 2014-09-03] (The Nielsen Company)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [251096 2014-10-04] (Realtek Semiconductor)
R2 TGCM_ImportWiFiSvc; C:\Program Files\o2\Mobile Connection Manager\ImpWiFiSvc.exe [200624 2010-09-29] (Telefónica I+D)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amd_sata; C:\Windows\System32\DRIVERS\amd_sata.sys [66688 2011-04-16] (Advanced Micro Devices)
R0 amd_xata; C:\Windows\System32\DRIVERS\amd_xata.sys [33408 2011-04-16] (Advanced Micro Devices)
R3 AppObserver; C:\Program Files\NetRatingsNetSight\NetSight\meter3\appobserver.sys [14560 2014-09-03] (The Nielsen Company)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98160 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-09-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
S3 camdrv41; C:\Windows\System32\DRIVERS\camdrv41.sys [1347584 2007-04-23] ()
S4 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-11] (Malwarebytes Corporation)
S3 MOSUMAC; C:\Windows\System32\DRIVERS\MOSUMAC.SYS [44032 2009-12-07] (--)
R1 nnfwdk; C:\Program Files\NetRatingsNetSight\NetSight\meter3\nnfwdk.sys [23264 2014-09-03] (The Nielsen Company)
R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [270552 2014-10-04] (Realtek Semiconductor Corp.)
S3 RTL8192Ce; C:\Windows\System32\DRIVERS\rtl8192Ce.sys [1004136 2011-01-05] (Realtek Semiconductor Corporation                          )
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [2591960 2014-10-04] (Realtek Semiconductor Corporation                          )
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [18624 2014-06-04] (IObit)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
R2 WinRing0_1_2_0; C:\Users\user\AppData\Local\Microsoft\Windows Sidebar\Gadgets\IntelCoreSeries25.gadget\WinRing0.sys [14416 2012-10-27] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\user\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-12 12:55 - 2014-11-12 12:57 - 00018125 _____ () C:\Users\user\Downloads\FRST.txt
2014-11-12 10:28 - 2014-11-12 10:28 - 02347384 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_deu (1).exe
2014-11-12 10:23 - 2014-11-12 10:23 - 00000056 _____ () C:\Windows\setupact.log
2014-11-12 10:23 - 2014-11-12 10:23 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-12 10:19 - 2014-11-12 10:19 - 00009118 _____ () C:\Users\user\Desktop\bookmarks.klickworker.odt
2014-11-11 23:56 - 2014-11-11 23:56 - 00000000 ____D () C:\Program Files\ESET
2014-11-11 23:55 - 2014-11-11 23:56 - 02347384 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_deu.exe
2014-11-11 23:55 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-11 23:54 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-11 23:54 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-11 23:54 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-11 23:54 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 23:53 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-11 23:53 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-11 23:53 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-11 23:53 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-11 23:53 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-11 23:53 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-11 23:53 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-11 23:53 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-11 23:53 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-11 23:53 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-11 23:53 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-11 23:53 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-11 23:53 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-11 23:53 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-11 23:53 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-11 23:52 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-11 23:52 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-11 23:52 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-11 23:52 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-11 23:52 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-11 23:52 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-11 23:52 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-11 23:52 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-11 23:52 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-11 23:52 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-11 23:52 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-11 23:52 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-11 23:52 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-11 23:52 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-11 23:52 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-11 23:52 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-11 23:52 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-11 23:52 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-11 23:52 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-11 23:52 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-11 23:52 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-11 23:52 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-11 23:52 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-11 23:52 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-11 23:52 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-11 23:52 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-11 23:51 - 2014-11-11 23:51 - 00007394 _____ () C:\Users\user\Desktop\mbam.txt
2014-11-11 23:51 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-11 23:51 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-11 23:51 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-11 23:51 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-11 23:51 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-11 22:42 - 2014-11-11 23:46 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-11 22:42 - 2014-11-11 22:42 - 00001068 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-11 22:42 - 2014-11-11 22:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-11 22:41 - 2014-11-11 22:41 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-11 22:41 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-11 22:41 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-11 22:41 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-11 22:39 - 2014-11-11 22:39 - 00000000 ____D () C:\Users\user\AppData\Local\AskPartnerNetwork
2014-11-11 22:39 - 2014-11-11 22:39 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-11-11 22:39 - 2014-11-11 22:39 - 00000000 ____D () C:\ProgramData\APN
2014-11-11 22:39 - 2014-11-11 22:39 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-11-11 22:37 - 2014-11-11 22:39 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\user\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-11 22:37 - 2014-11-11 22:37 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-11-11 22:28 - 2014-11-11 22:28 - 00638888 _____ (Oracle Corporation) C:\Users\user\Downloads\chromeinstall-8u25 (1).exe
2014-11-11 22:25 - 2014-11-11 22:25 - 00638888 _____ (Oracle Corporation) C:\Users\user\Downloads\chromeinstall-8u25.exe
2014-11-11 12:26 - 2014-11-11 12:26 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-11 12:10 - 2014-11-11 12:10 - 00000819 _____ () C:\Users\user\Desktop\Fixlist.txt
2014-11-11 10:34 - 2014-11-11 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2
2014-11-11 10:34 - 2014-11-11 10:34 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-11-11 10:16 - 2014-11-11 10:17 - 00022411 _____ () C:\Users\user\Downloads\Addition1.txt
2014-11-11 10:14 - 2014-11-11 10:17 - 00046492 _____ () C:\Users\user\Downloads\FRST1.txt
2014-11-11 10:09 - 2014-11-11 10:09 - 00000978 _____ () C:\Users\user\Desktop\JRT.txt
2014-11-11 09:52 - 2014-11-12 10:24 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-11-11 09:38 - 2014-11-11 09:38 - 00001517 _____ () C:\Users\user\Desktop\AdwCleaner_4.101 - Verknüpfung.lnk
2014-11-11 09:37 - 2014-11-11 09:37 - 02140160 _____ () C:\Users\user\Downloads\AdwCleaner_4.101.exe
2014-11-10 20:15 - 2014-11-10 20:16 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-10 17:33 - 2014-11-10 17:33 - 00024571 _____ () C:\ComboFix.txt
2014-11-10 16:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-11-10 16:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-11-10 16:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-11-10 16:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-11-10 16:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-11-10 16:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-11-10 16:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-11-10 16:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-11-10 16:30 - 2014-11-10 16:57 - 05598341 ____R (Swearware) C:\Users\user\Downloads\ComboFix.exe
2014-11-10 15:39 - 2014-11-10 17:33 - 00000000 ____D () C:\Qoobox
2014-11-10 15:38 - 2014-11-10 17:29 - 00000000 ____D () C:\Windows\erdnt
2014-11-10 15:37 - 2014-11-10 15:37 - 00001134 _____ () C:\Users\user\Desktop\ComboFix - Verknüpfung.lnk
2014-11-09 13:57 - 2014-11-09 14:24 - 171909728 _____ () C:\Users\user\Downloads\AIO_CDB_Full_Non-Network_deu_NB.exe
2014-11-09 00:52 - 2014-06-23 18:36 - 00000170 _____ () C:\Users\user\Desktop\Dnscache bereinigen.cmd
2014-11-08 23:45 - 2014-11-11 09:58 - 01706808 _____ (Thisisu) C:\Users\user\Downloads\JRT.exe
2014-11-08 23:33 - 2014-11-12 12:55 - 00000000 ____D () C:\FRST
2014-11-08 23:32 - 2014-11-08 23:32 - 01107968 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2014-11-08 19:59 - 2014-11-11 09:49 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-08 19:59 - 2014-11-08 19:59 - 00001125 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-08 19:59 - 2014-11-08 19:59 - 00001113 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-08 19:54 - 2014-11-08 19:55 - 00244328 _____ () C:\Users\user\Downloads\Firefox Setup Stub 33.0.3.exe
2014-11-07 16:25 - 2014-11-07 16:25 - 00001140 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-11-07 16:25 - 2014-11-07 16:25 - 00001128 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-11-07 16:25 - 2014-11-07 16:25 - 00000000 ____D () C:\Program Files\TeamViewer
2014-11-05 20:09 - 2014-11-05 20:09 - 00000000 ____D () C:\Users\user\AppData\Roaming\TeamViewer
2014-11-05 20:06 - 2014-11-05 20:08 - 06626832 _____ (TeamViewer GmbH) C:\Users\user\Downloads\TeamViewer_Setup_de.exe
2014-11-05 01:52 - 2014-11-05 01:52 - 00135747 _____ () C:\Users\user\Documents\test.xps
2014-11-05 01:49 - 2014-11-05 01:49 - 00154926 _____ () C:\Users\user\Documents\CHECK Bäckerei Wimmer.xps
2014-11-04 23:53 - 2014-11-12 10:23 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-11-02 11:41 - 2014-11-02 12:34 - 32809520 _____ (IObit ) C:\Users\user\Downloads\IObit-Malware-Fighter-Setup (1).exe
2014-10-28 05:19 - 2014-10-28 05:19 - 00000000 ____D () C:\Users\user\AppData\Roaming\dlg
2014-10-28 04:25 - 2014-10-28 04:30 - 00659456 _____ (Speed Guide Inc.) C:\Users\user\Downloads\TCPOptimizer.exe
2014-10-28 04:15 - 2014-10-28 04:15 - 00004974 _____ () C:\Users\user\Desktop\SG_Vista_TcpIp_patch.cmd
2014-10-27 19:15 - 2014-10-28 03:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEB.DE MailCheck
2014-10-27 19:15 - 2014-10-27 19:15 - 00000000 ____D () C:\Program Files\WEB.DE MailCheck
2014-10-27 17:49 - 2014-10-27 17:49 - 00000399 _____ () C:\Users\user\Desktop\Wrar30b5 - Verknüpfung.lnk
2014-10-26 23:33 - 2014-11-05 00:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-10-26 23:32 - 2014-11-12 12:44 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-26 23:32 - 2014-11-12 10:23 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-25 22:40 - 2014-10-25 22:40 - 00000000 ____D () C:\Users\user\AppData\Roaming\Avira
2014-10-25 21:50 - 2014-10-25 21:50 - 00000959 _____ () C:\Windows\system32\Avira System Speedup.lnk
2014-10-25 21:46 - 2014-10-25 21:46 - 00001099 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-10-25 21:45 - 2014-10-25 21:45 - 04714656 _____ (Avira Operations GmbH & Co. KG) C:\Users\user\Downloads\avira_de_av___ws2015.exe
2014-10-25 21:39 - 2014-10-25 21:39 - 00000000 ____D () C:\Users\user\AppData\Roaming\AVG
2014-10-25 21:38 - 2014-11-09 01:20 - 00000000 ____D () C:\Program Files\AVG
2014-10-25 21:37 - 2014-10-25 21:37 - 00000000 ____D () C:\Users\user\AppData\Local\Avg
2014-10-25 21:36 - 2014-10-25 21:40 - 00000000 ____D () C:\ProgramData\AVG
2014-10-25 21:30 - 2014-10-25 21:36 - 90754872 _____ (AVG Technologies) C:\Users\user\Downloads\avg_tuht_stf_all_2015_185.exe
2014-10-22 18:52 - 2014-10-22 18:52 - 00003544 ____N () C:\bootsqm.dat
2014-10-22 16:11 - 2014-10-22 16:11 - 00000000 ____D () C:\Users\user\AppData\Roaming\TuneUp Software
2014-10-22 16:10 - 2014-10-25 21:24 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2013
2014-10-22 16:08 - 2014-10-22 16:34 - 00000000 __SHD () C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2014-10-22 16:08 - 2014-10-22 16:18 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-10-22 16:05 - 2014-10-22 16:06 - 28181408 _____ (TuneUp Software) C:\Users\user\Downloads\TuneUpUtilities2013_de-DE.exe
2014-10-19 15:04 - 2014-10-19 15:03 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-19 15:03 - 2014-11-11 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-19 15:03 - 2014-11-11 22:34 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-19 15:03 - 2014-10-19 15:03 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-19 15:03 - 2014-10-19 15:03 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-19 14:40 - 2014-10-28 03:37 - 00000000 ____D () C:\Program Files\1und1Softwareaktualisierung
2014-10-19 14:40 - 2014-10-28 03:36 - 00000000 ____D () C:\ProgramData\1&1 Mail & Media GmbH
2014-10-19 14:40 - 2014-10-19 14:40 - 00002002 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WEB.DE.lnk
2014-10-19 14:40 - 2014-10-19 14:40 - 00001984 _____ () C:\Users\user\Desktop\Amazon.lnk
2014-10-19 14:40 - 2014-10-19 14:40 - 00001978 _____ () C:\Users\user\Desktop\WEB.DE.lnk
2014-10-19 14:40 - 2014-10-19 14:40 - 00000000 ____D () C:\ProgramData\UUdb
2014-10-17 09:26 - 2014-10-17 09:26 - 00001142 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2014-10-17 09:26 - 2014-10-17 09:26 - 00001118 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-10-15 00:53 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 00:51 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 00:51 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-15 00:51 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 00:51 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 00:51 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 00:51 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 00:51 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 00:51 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 00:51 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 00:51 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 00:49 - 2014-08-19 03:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-15 00:49 - 2014-08-19 03:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-15 00:49 - 2014-08-19 03:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-15 00:49 - 2014-08-19 03:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 00:49 - 2014-08-19 03:40 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 00:49 - 2014-08-19 02:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-15 00:49 - 2014-07-07 02:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-15 00:49 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-15 00:49 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-15 00:49 - 2014-07-07 02:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-15 00:49 - 2014-07-07 02:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-10-15 00:49 - 2014-07-07 02:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-15 00:49 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-15 00:49 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-15 00:49 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-15 00:49 - 2014-07-07 02:28 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-15 00:49 - 2014-06-28 01:21 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-15 00:49 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-15 00:49 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-13 09:39 - 2014-10-13 09:39 - 00002066 _____ () C:\Users\Public\Desktop\Mobile Connection Manager.lnk
2014-10-13 09:39 - 2010-11-04 10:51 - 00085248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-10-13 09:39 - 2010-10-09 07:48 - 00072576 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-10-13 09:39 - 2010-09-26 11:00 - 00051456 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-10-13 09:39 - 2010-09-26 11:00 - 00026496 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2014-10-13 09:39 - 2010-09-03 10:35 - 00168960 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2014-10-13 09:39 - 2010-08-31 11:09 - 00208896 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbnet.sys
2014-10-13 09:39 - 2010-08-07 10:48 - 00106880 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-10-13 09:39 - 2010-05-10 07:18 - 00860928 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-10-13 09:39 - 2010-03-20 05:06 - 00011136 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2014-10-13 09:39 - 2010-01-18 11:48 - 00027136 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-10-13 09:38 - 2014-10-28 03:37 - 00000000 ____D () C:\Program Files\HUAWEI Modem Driver
2014-10-13 09:38 - 2010-07-27 02:52 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-12 11:59 - 2012-10-27 11:51 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-12 10:32 - 2009-07-14 05:34 - 00028896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-12 10:32 - 2009-07-14 05:34 - 00028896 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-12 10:31 - 2012-10-27 09:08 - 01783306 _____ () C:\Windows\WindowsUpdate.log
2014-11-12 10:28 - 2010-11-20 22:01 - 01620440 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-12 10:25 - 2014-05-20 16:47 - 00000000 ___RD () C:\Users\user\Dropbox
2014-11-12 10:25 - 2014-05-20 16:43 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dropbox
2014-11-12 10:23 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-12 04:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-11-12 03:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-12 03:40 - 2009-07-14 05:33 - 00286856 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-12 03:38 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-12 03:37 - 2014-05-07 06:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 03:14 - 2013-08-16 21:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 03:04 - 2012-10-27 12:52 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-11 23:31 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Performance
2014-11-11 22:33 - 2013-10-20 11:38 - 00000000 ____D () C:\ProgramData\Oracle
2014-11-11 22:32 - 2013-07-28 12:08 - 00000000 ____D () C:\Program Files\Java
2014-11-11 21:31 - 2014-09-02 18:10 - 00000222 _____ () C:\Users\user\BullseyeCoverageError.txt
2014-11-11 12:18 - 2009-07-14 03:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-11 10:35 - 2014-07-14 16:01 - 00000000 ____D () C:\ProgramData\ProductData
2014-11-11 10:34 - 2014-07-14 16:00 - 00000000 ____D () C:\Program Files\IObit
2014-11-11 09:47 - 2014-02-19 20:09 - 00000000 ____D () C:\AdwCleaner
2014-11-11 09:41 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2014-11-10 17:33 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-11-10 17:33 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-11-10 17:25 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-11-09 23:47 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-08 23:53 - 2014-03-02 19:48 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2014-11-08 20:00 - 2012-10-27 12:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\Mozilla
2014-11-07 21:38 - 2012-10-27 10:11 - 00064024 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-07 16:14 - 2014-07-14 16:00 - 00002083 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-11-07 16:09 - 2014-07-14 16:13 - 39890944 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-11-07 16:09 - 2014-07-14 16:13 - 00278528 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-11-07 16:09 - 2014-07-14 16:13 - 00028672 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-11-07 16:09 - 2014-07-14 16:13 - 00024576 _____ () C:\Windows\system32\config\SAM.iobit
2014-11-06 12:53 - 2014-05-20 21:02 - 00000000 ____D () C:\Users\user\Downloads\freundschaft
2014-11-02 18:07 - 2014-03-13 00:57 - 00000000 ____D () C:\Users\user\Downloads\gute nacht
2014-11-02 18:04 - 2014-03-10 03:09 - 00000000 ____D () C:\Users\user\Downloads\kisses
2014-11-02 18:01 - 2014-03-10 02:23 - 00000000 ____D () C:\Users\user\Downloads\grüße und so
2014-11-02 17:58 - 2014-08-05 23:07 - 00000000 ____D () C:\Users\user\Downloads\MICHAS HANDY
2014-11-02 17:58 - 2014-04-07 23:23 - 00000000 ____D () C:\Users\user\Downloads\dies und das
2014-10-30 22:34 - 2014-07-14 16:13 - 30732288 _____ () C:\Windows\system32\config\components.iobit
2014-10-28 06:35 - 2014-01-24 22:22 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-28 03:37 - 2012-11-27 07:06 - 00000000 ____D () C:\Program Files\Avira
2014-10-28 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-10-28 03:36 - 2014-08-19 07:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-10-28 03:36 - 2014-08-08 08:37 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-28 03:36 - 2014-07-14 16:03 - 00000000 ____D () C:\Users\user\AppData\Roaming\ProductData
2014-10-28 03:36 - 2014-07-14 16:01 - 00000000 ____D () C:\ProgramData\IObit
2014-10-28 03:36 - 2014-07-14 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-10-28 03:36 - 2014-07-14 15:59 - 00000000 ____D () C:\Users\user\AppData\Roaming\IObit
2014-10-28 03:36 - 2014-05-24 02:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviraSpeedup
2014-10-28 03:36 - 2012-10-27 22:59 - 00000000 ____D () C:\ProgramData\DesktopIcons
2014-10-28 03:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-10-28 03:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2014-10-26 23:33 - 2012-12-22 16:41 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2014-10-26 23:32 - 2012-12-22 16:41 - 00000000 ____D () C:\Program Files\Google
2014-10-25 22:27 - 2013-01-02 16:07 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-10-25 22:13 - 2013-05-07 13:39 - 00037384 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-10-25 22:06 - 2014-10-01 02:20 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-10-25 21:58 - 2014-07-25 16:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-10-25 21:46 - 2012-11-27 07:06 - 00000000 ____D () C:\ProgramData\Avira
2014-10-24 10:01 - 2014-05-04 16:57 - 00000000 ____D () C:\Users\user\Downloads\schön, dass es d.g
2014-10-24 09:57 - 2014-03-28 18:38 - 00000000 ____D () C:\Users\user\Downloads\kuscheln
2014-10-24 09:55 - 2014-03-13 02:25 - 00000000 ____D () C:\Users\user\Downloads\hab dich lieb
2014-10-24 09:46 - 2014-03-09 18:37 - 00000000 ____D () C:\Users\user\Downloads\fb-pics
2014-10-24 09:45 - 2014-03-13 22:14 - 00000000 ____D () C:\Users\user\Downloads\denk an dich
2014-10-23 20:14 - 2012-10-27 09:30 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2014-10-22 18:53 - 2014-07-14 17:24 - 39890944 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-10-22 18:53 - 2014-07-14 17:24 - 00278528 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-10-22 18:53 - 2014-07-14 17:24 - 00028672 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-10-22 18:53 - 2014-07-14 17:24 - 00024576 _____ () C:\Windows\system32\config\SAM.iodefrag.bak

Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\APNSetup.exe
C:\Users\user\AppData\Local\Temp\avgnt.exe
C:\Users\user\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\user\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp6xreap.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-05 11:16

==================== End Of Log ============================
--- --- ---



Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 08-11-2014 01
Ran by user at 2014-11-12 12:59:22
Running from C:\Users\user\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.4.402.265 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.4.402.265 - Adobe Systems Incorporated)
Adobe Reader X (10.1.4) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.6.636 - Adobe Systems, Inc.)
Advanced SystemCare 7 (HKLM\...\Advanced SystemCare 7_is1) (Version: 7.4.0 - IObit)
ATI Catalyst Install Manager (HKLM\...\{13AD0436-E893-E726-0CBB-33FCF35A2F29}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
Avira (HKLM\...\{9bd9b85e-7792-483b-a318-cc51ff0877ed}) (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira)
Avira System Speedup (HKLM\...\AviraSpeedup) (Version: 1.3.1.9970 - Avira System Speedup)
Driver Booster 2 (HKLM\...\Driver Booster_is1) (Version: 2.0 - IObit)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
HUAWEI DataCard Driver 4.20.12.00 (HKLM\...\HUAWEI DataCard Driver) (Version: 4.20.12.00 - Huawei technologies Co., Ltd.)
IObit Malware Fighter (HKLM\...\IObit Malware Fighter_is1) (Version: 2.4 - IObit)
IObit Uninstaller (HKLM\...\IObitUninstall) (Version: 4.0.4.27 - IObit)
Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mobile Connection Manager (HKLM\...\o2DE) (Version:  - Mobile Connection Manager)
Mozilla Firefox 33.1 (x86 de) (HKLM\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 33.0.3 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero BurnLite 10 (HKLM\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10600 - Nero AG)
Nero BurnLite 10 (HKLM\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10500.5.100 - Nero AG)
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Nielsen (HKLM\...\NetSight) (Version:  - )
OpenOffice.org 3.4.1 (HKLM\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
PhotoScape (HKLM\...\PhotoScape) (Version:  - )
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.42.304.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.77 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.10.0416 - REALTEK Semiconductor Corp.)
Search App by Ask (HKLM\...\{4F524A2D-5350-4500-76A7-A758B70C1200}) (Version: 12.18.0.82 - APN, LLC) <==== ATTENTION
Smart Defrag 3 (HKLM\...\Smart Defrag 3_is1) (Version: 3.2 - IObit)
Surfing Protection (HKLM\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 6.3.6 - Shark007)
VLC media player 2.0.3 (HKLM\...\VLC media player) (Version: 2.0.3 - VideoLAN)
WEB.DE Desktop Icons (HKLM\...\1&1 Mail & Media GmbH 1und1DesktopIconsInstaller) (Version: 3.0.3.0 - 1&1 Mail & Media GmbH)
WEB.DE MailCheck für Internet Explorer (HKLM\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.5.1.0 - 1&1 Mail & Media GmbH)
WEB.DE Softwareaktualisierung (HKLM\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{07474513-7B58-45c7-B3E6-13A3669B1AFD}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\user\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-4249131668-4266709875-3981103518-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\user\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

25-10-2014 20:37:24 AVG PC TuneUp 2015 wird installiert
25-10-2014 20:48:32 Avira System Speedup(1.3.1.9970)
27-10-2014 17:25:54 Wiederherstellungsvorgang
29-10-2014 13:36:51 Windows Update
04-11-2014 08:08:49 Windows Update
08-11-2014 02:41:53 Windows Update
09-11-2014 00:10:57 AVG PC TuneUp 2015 wird entfernt
09-11-2014 00:14:12 AVG PC TuneUp 2015 (de-DE) wird entfernt
09-11-2014 13:10:32 IObit Uninstaller restore point
09-11-2014 13:13:16 IObit Uninstaller restore point
11-11-2014 08:59:44 Windows Update
12-11-2014 02:00:44 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2014-11-11 17:29 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0260C91F-8683-405A-A405-037FC820465E} - System32\Tasks\{BB394F92-76B1-40FF-9462-20A6EF69712A} => Chrome.exe
Task: {0507D07E-BA21-4792-B443-10E14AE6C871} - System32\Tasks\{AE4D836F-9F55-47CD-9D9E-73CC1E288991} => Chrome.exe
Task: {1828A629-104E-41BA-BDB9-08FF158047EE} - System32\Tasks\{AFF5E3E0-9586-44D8-B8BB-472FE885DC24} => Chrome.exe
Task: {2FB0E877-E429-4581-93AB-8D301A90373D} - System32\Tasks\AviraSpeedup => C:\Program Files\Avira\AviraSpeedup\avira_system_speedup.exe [2014-10-25] (Avira)
Task: {351D3829-E2E7-49CC-87D8-DA7C1B95ED1C} - System32\Tasks\{1A2679E7-8EDB-4A66-9143-52CB643A1814} => Chrome.exe
Task: {370F8FB5-F99A-44C1-8F65-5735678BC6BD} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe [2014-08-20] (IObit)
Task: {48335AE9-9BFB-4792-9B01-A7B6406BB56D} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-10-17] (IObit)
Task: {4EBEBE78-8D97-4EDB-A1AD-E4AC470A574A} - System32\Tasks\ASC7_SkipUac_user => C:\Program Files\IObit\Advanced SystemCare 7\ASC.exe [2014-08-22] (IObit)
Task: {66FE8849-6F84-412A-9ABF-E917D55F7587} - System32\Tasks\{FFE226A5-6C6F-43F2-B8B9-68C83D5657F5} => Chrome.exe
Task: {7F573940-6662-4855-8678-9DDBCA855401} - System32\Tasks\SmartDefrag3_Update => C:\Program Files\IObit\Smart Defrag 3\AutoUpdate.exe [2014-07-03] (IObit)
Task: {8D3FD857-E505-4C71-8CC8-3CA054D6C3DB} - System32\Tasks\{3CB76F79-91BE-4A3C-BF3C-E1ED42D1DF1B} => Chrome.exe
Task: {A12A9A6B-4D23-4E6A-9C24-A966DEE5E52C} - System32\Tasks\{0DF3F321-6F12-4D3A-920E-0958B9897D20} => Chrome.exe
Task: {A2AE1D1B-B82C-425F-A41B-7C59329B8801} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)
Task: {A558DF8A-E1EF-45A7-868C-0B88A0000A4C} - System32\Tasks\{BBD55A86-D393-49FB-8116-EC6CDB9A618D} => Chrome.exe
Task: {AA1462EB-1ECD-4B8D-A431-62FD9FA039DA} - System32\Tasks\Laufwerkbereinigung
Task: {AC580489-1042-4314-B30B-3A014CD8CFE4} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {ACE4DD08-3FC1-455C-B855-7A7B23021A37} - System32\Tasks\{8B8D346A-FF7A-414A-9C3C-27D824ADAE10} => Chrome.exe
Task: {B06285EE-1CF2-4E18-A632-8767E6D53834} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)
Task: {BE2B3C4D-D2BD-4701-A232-52AF083F24BD} - System32\Tasks\Driver Booster Update => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
Task: {BE489DF5-544E-45AC-949D-E6C577522B6D} - System32\Tasks\{75530986-2251-46D0-A046-47243D3EB8B6} => Chrome.exe
Task: {BE637763-2667-4F19-B276-D8EA33BE44F8} - System32\Tasks\Uninstaller_SkipUac_user => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-10-17] (IObit)
Task: {DF73BF65-479B-4476-B162-BFAAC9C5CC0F} - System32\Tasks\{878049BB-75E4-4FA1-ADA7-4B2CCBF2E5E0} => Chrome.exe
Task: {E6D9599B-A568-4171-8E22-08419CB7C839} - System32\Tasks\Driver Booster Scan => C:\Program Files\IObit\Driver Booster\Scheduler.exe
Task: {F25F1516-1D6A-4A1C-9D3D-7F95C4762821} - System32\Tasks\SmartDefrag3_Startup => C:\Program Files\IObit\Smart Defrag 3\SmartDefrag.exe [2014-07-02] (IObit)
Task: {F56DEC74-FE70-4176-8173-B0435230BA6B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-27] (Adobe Systems Incorporated)
Task: {FEBCF3C1-A5F8-4A49-AB17-93F8A2F9B6C5} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-07-14 16:00 - 2013-10-25 11:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 7\sqlite3.dll
2014-10-01 02:38 - 2014-09-03 12:56 - 00505344 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\communication.dll
2014-06-14 21:20 - 2014-09-03 13:01 - 00504832 _____ () C:\Program Files\NetRatingsNetSight\NetSight\nsmmc.dll
2011-07-05 10:26 - 2011-07-05 10:26 - 00065024 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2014-10-01 02:38 - 2014-09-03 12:57 - 00596480 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\npchromeinstaller.dll
2014-10-01 02:38 - 2014-09-03 12:57 - 01247232 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\npffaddons.dll
2014-10-01 02:38 - 2014-09-03 12:58 - 00851968 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\npfirefoxprocessor.dll
2014-10-01 02:38 - 2014-09-03 12:56 - 00150528 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\npsp1.dll
2014-10-01 02:38 - 2014-09-03 12:57 - 00228864 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\npsurvey.dll
2014-10-01 02:38 - 2014-09-03 12:57 - 00224768 _____ () C:\Program Files\NetRatingsNetSight\NetSight\meter3\npwmi.dll
2014-11-12 10:25 - 2014-11-12 10:25 - 00043008 _____ () c:\users\user\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp6xreap.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\user\AppData\Roaming\Dropbox\bin\libcef.dll
2014-07-14 16:00 - 2014-02-13 15:44 - 01214240 _____ () C:\Program Files\IObit\Advanced SystemCare 7\RealTimeProtector.exe
2014-07-14 16:00 - 2013-01-15 17:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 7\madExcept_.bpl
2014-07-14 16:00 - 2013-01-15 17:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 7\madBasic_.bpl
2014-07-14 16:00 - 2013-01-15 17:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2014-10-28 01:49 - 2014-10-22 05:04 - 08910664 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll
2014-10-28 01:49 - 2014-10-22 05:04 - 01681224 _____ () C:\Program Files\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-4249131668-4266709875-3981103518-500 - Administrator - Disabled)
Gast (S-1-5-21-4249131668-4266709875-3981103518-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4249131668-4266709875-3981103518-1005 - Limited - Enabled)
user (S-1-5-21-4249131668-4266709875-3981103518-1000 - Administrator - Enabled) => C:\Users\user

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/12/2014 10:24:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2014 03:41:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2014 03:38:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x4e132d09
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003224d
ID des fehlerhaften Prozesses: 0x53c
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (11/11/2014 11:33:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2014 05:33:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2014 05:30:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x4e132d09
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003224d
ID des fehlerhaften Prozesses: 0x7a0
Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0
Pfad der fehlerhaften Anwendung: Fuel.Service.exe1
Pfad des fehlerhaften Moduls: Fuel.Service.exe2
Berichtskennung: Fuel.Service.exe3

Error: (11/11/2014 00:26:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (11/12/2014 10:23:48 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (11/12/2014 10:21:39 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/12/2014 03:41:00 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (11/12/2014 03:37:22 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/11/2014 11:32:34 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (11/11/2014 11:30:04 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/11/2014 05:32:48 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (11/11/2014 05:30:47 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/11/2014 00:26:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (11/11/2014 00:25:12 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================
Error: (11/12/2014 10:24:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2014 03:41:37 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/12/2014 03:38:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fuel.Service.exe1.0.0.04e132d09ntdll.dll6.1.7601.18247521ea91cc00000050003224d53c01cffdff65bb4454C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Windows\SYSTEM32\ntdll.dllfe54ffd2-6a14-11e4-90df-3cd92b1aa61e

Error: (11/11/2014 11:33:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2014 05:33:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/11/2014 05:30:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fuel.Service.exe1.0.0.04e132d09ntdll.dll6.1.7601.18247521ea91cc00000050003224d7a001cffda230821299C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Windows\SYSTEM32\ntdll.dll1e1346fb-69c0-11e4-9b55-3cd92b1aa61e

Error: (11/11/2014 00:26:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2012-11-23 13:58:36.380
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.380
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.364
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.349
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.333
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.333
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.271
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.239
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-11-23 13:58:36.208
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: AMD C-50 Processor
Percentage of memory in use: 59%
Total physical RAM: 1642.9 MB
Available physical RAM: 663.69 MB
Total Pagefile: 5738.9 MB
Available Pagefile: 4171.46 MB
Total Virtual: 2047.88 MB
Available Virtual: 1894.18 MB

==================== Drives ================================

Drive c: (Win7) (Fixed) (Total:465.66 GB) (Free:428.87 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 717D91F5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus 12.11.2014 14:04
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKU\S-1-5-21-4249131668-4266709875-3981103518-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


tiffany1963 12.11.2014 14:44
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-11-2014 01
Ran by user at 2014-11-12 14:42:12 Run:4
Running from C:\Users\user\Downloads
Loaded Profile: user (Available profiles: user)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-4249131668-4266709875-3981103518-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
*****************

"HKU\S-1-5-21-4249131668-4266709875-3981103518-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key not found.

==== End of Fixlog ====

cosinus 12.11.2014 16:04
ESET jetzt nochmal probieren, Eset Online Scanner vorher neu runterladen.

tiffany1963 12.11.2014 20:25
Guten Abend,

ESET läuft jetzt seit 2 1/2 Stunden und hängt schon eine geraume Zeit bei 99 % fest.

Was soll ich bitte tun?

Grüße

Hab Eset jetzt beendet. Hoffe, dass das 1 % nicht ausschlaggebend ist.

Hier das Ergebnis

Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=ae76b596fd9a984b907020bfdb103261
# engine=21059
# end=stopped
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-12 07:20:02
# local_time=2014-11-12 08:20:02 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 27424 4264541 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 81001 167451192 0 0
# scanned=108142
# found=222
# cleaned=0
# scan_time=10777
sh=1E09E14B1858EE3D5356C7FFB2A1EC4F34628F40 ft=1 fh=c71c00114be96104 vn="Win32/AdWare.SmartApps.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Bench\NmHost\nmhost.exe.vir"
sh=FF6C5A8C29C241FF6473F523BBC503CA71495828 ft=1 fh=b00fb477ddfbb081 vn="Win32/AdWare.SmartApps.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Bench\Updater\updater.exe.vir"
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir"
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert0.dll.vir"
sh=F4687F26FB5F90F12B444867597F3C32F765B35F ft=1 fh=512b5a55375d865d vn="Win32/Toolbar.Conduit.T evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll.vir"
sh=C58417722C0B741EA8D55D06914E692180900885 ft=1 fh=f4976c33c2ff8570 vn="Win32/Toolbar.Conduit.V evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FreemiumA\FreemiumAToolbarHelper.exe.vir"
sh=068A54F966DB6AC14BCA0E39E2A99E3F0027304D ft=1 fh=39f7a16b0423d981 vn="Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FreemiumA\hk64tbFree.dll.vir"
sh=CC6AF3A384A61C1C621BA5AB43583E82FF281530 ft=1 fh=bbbd034bf7d0bf76 vn="Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FreemiumA\hktbFree.dll.vir"
sh=9B3B44428CC80CC43F085AE514E7E16F7963EACC ft=1 fh=4c03fc1250fa29f9 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FreemiumA\ldrtbFree.dll.vir"
sh=49F05B2770D4CAE7550D8268FDCF50E3BAEBB7CC ft=1 fh=f6f4f0e4f3b1176c vn="Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FreemiumA\prxtbFree.dll.vir"
sh=33457E2F2405727124C107D6DEAF24C94E992463 ft=1 fh=e719e166edfd7994 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\FreemiumA\tbFree.dll.vir"
sh=B113743EA1A600DA08D0C7D2C8E685E67B322952 ft=1 fh=2365fa20da5cfe48 vn="Win32/BrowserCompanion.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanion\jsloader.dll.vir"
sh=D6C9AADF4998F5A84401C30B5F4E93F48D903794 ft=1 fh=0b972f7aa778831b vn="Win32/BrowserCompanion.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanion\tdataprotocol.dll.vir"
sh=D4E707F12473B860EFC26AB446BFC3E6A1AC75B6 ft=1 fh=cc251c8346e403b7 vn="Win32/BrowserCompanion.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanion\toolbar.dll.vir"
sh=23D7BC03B41D9C463C4A5798201B977C1882D132 ft=1 fh=beb4c1f8a680ba3e vn="Win32/BrowserCompanion.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanion\updatebhoWin32.dll.vir"
sh=7BA6B88A01305C75913525EA924AEBAFF6AD8366 ft=1 fh=b16139a7fd698cef vn="Win32/BrowserCompanion.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanion\widgetserv.exe.vir"
sh=F4F38DF7A2F1DCC7912C94D70906253B44ECCC86 ft=1 fh=b743b7ef77aef201 vn="Win32/BrowserCompanion.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanions\tdataprotocol.dll.vir"
sh=D4E707F12473B860EFC26AB446BFC3E6A1AC75B6 ft=1 fh=cc251c8346e403b7 vn="Win32/BrowserCompanion.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanions\toolbar.dll.vir"
sh=7BA6B88A01305C75913525EA924AEBAFF6AD8366 ft=1 fh=b16139a7fd698cef vn="Win32/BrowserCompanion.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\GinyasBrowserCompanions\widgetserv.exe.vir"
sh=942E0088219BAE8A333150844C1C76E26D1BD149 ft=0 fh=0000000000000000 vn="Win32/AdWare.BetterSurf.G Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\MediaPlayerV1\MediaPlayerV1alpha6472\ff\chrome\content\ffMediaPlayerV1alpha6472ffaction.js.vir"
sh=B23E066A693E31311B8BD26FDC57E782644F9B5A ft=1 fh=3542a3be8b18f1bd vn="Variante von Win32/SpeedingUpMyPC Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\optimizer pro\OptimizerPro.exe.vir"
sh=E38DA44318FB264A7FC8DE54EC90E558E611162C ft=1 fh=0d5502795c9a4577 vn="Variante von Win32/AdWare.SpeedingUpMyPC.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\optimizer pro\OptProLauncher.exe.vir"
sh=B7543EF0B5D581B3ACB42F880E81DA30E36C5A2F ft=1 fh=ab572c62ffea4be2 vn="Variante von Win32/Adware.SpeedingUpMyPC.C Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\optimizer pro\OptProSmartScan.exe.vir"
sh=3EC25D2D25AFC5494CF4788D13F7808CF24AB8EC ft=1 fh=f062b5993be728c8 vn="Win32/Toolbar.CrossRider.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Plus-HD-3.8\utils.exe.vir"
sh=5B316DFC64B10EF482340274CA23463B41FA06D7 ft=1 fh=65889e0c5d5dba37 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\Main\bin\CltMngSvc.exe.vir"
sh=8D431618E9030709F4F92F93482A042D2D0B70FA ft=1 fh=f9c5079134e88344 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\Main\bin\SPTool.dll.vir"
sh=DF96804C0D2D07D7543728DF582C86ACD3BEF3CF ft=1 fh=8676e6337a543f91 vn="Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\Main\bin\SPtool.dll_1390840796354.vir"
sh=DF96804C0D2D07D7543728DF582C86ACD3BEF3CF ft=1 fh=8676e6337a543f91 vn="Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\Main\bin\SPtool.dll_1390840796861.vir"
sh=5FF1DB4E5E08B0718AF684AB591F51C4289B9145 ft=1 fh=59283cd49474610a vn="Win32/Conduit.SearchProtect.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\Main\bin\uninstall.exe.vir"
sh=33E077621D027F3A6C83972DBD1B0C7F899C1B4E ft=1 fh=3081b00e12e38191 vn="Variante von Win32/Conduit.SearchProtect.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\SearchProtect\bin\cltmng.exe.vir"
sh=F697E03ADDEBA7FFAEB6F58DF392181B7124603D ft=1 fh=63d6f81f206b87ab vn="Variante von Win64/Conduit.SearchProtect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\SearchProtect\bin\SPTool64.exe.vir"
sh=CF86EC53BF89452D78E9232D0A650ED0D6DDFBF8 ft=1 fh=f9b15bfcf851b7f7 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\SearchProtect\bin\SPVC32.dll.vir"
sh=D472287B4D2DE014565DAA5FE33CE7A8D8467BEF ft=1 fh=be2a50d35d915b95 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\SearchProtect\bin\SPVC32Loader.dll.vir"
sh=A90FEB7960611E1959F335750997B5D1F96705CF ft=1 fh=cb70b3974a3698d7 vn="Variante von Win64/Conduit.SearchProtect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\SearchProtect\bin\SPVC64.dll.vir"
sh=3E71F188279BEBB9F9197E61CCB7D29619A56207 ft=1 fh=03c4fc387191019c vn="Variante von Win64/Conduit.SearchProtect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\SearchProtect\bin\SPVC64Loader.dll.vir"
sh=6F1A5ECDFB7EEC7C358BEFB0FB3D77CD7F21310D ft=1 fh=63510bae0f8b92a7 vn="Variante von Win32/Conduit.SearchProtect.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Searchprotect\UI\bin\cltmngui.exe.vir"
sh=F52E819AF7FC9ACA17932E2B3C05F5184F48B348 ft=1 fh=8f77b428daa0ab5f vn="Win32/ELEX.AR evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SupTab\BHOEnabler.exe.vir"
sh=63A43D95149B189141788E7C493DDCF07110145A ft=1 fh=60457eaec91070ea vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SupIePluginServiceUpdate.exe.vir"
sh=066797D487BA448FB1D401E34564FB93E2B2D910 ft=1 fh=e79164173f74db79 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\SupTab\SupTab.dll.vir"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Winload\ldrtbWinl.dll.vir"
sh=A2D929A9864513C0E8ED84AAD622EF6ADCC9B950 ft=1 fh=22c06217fc444ec5 vn="Win32/Toolbar.Conduit.O evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Winload\prxtbWinl.dll.vir"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Winload\tbWinl.dll.vir"
sh=E5AD99CE7C7362CA566156033ECB0F04F9437CA7 ft=1 fh=f45d83e01e1c8734 vn="Win32/Toolbar.Conduit.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Winload\WinloadToolbarHelper.exe.vir"
sh=5FB95D21BE8CF2753FD8A42398ADD26E2B21409F ft=1 fh=0f2c5f177050d203 vn="Variante von Win32/Toolbar.Conduit.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Conduit\IE\CT3322950\UninstallerUI.exe.vir"
sh=5FB95D21BE8CF2753FD8A42398ADD26E2B21409F ft=1 fh=0f2c5f177050d203 vn="Variante von Win32/Toolbar.Conduit.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Conduit\Multi\CT3322950\UninstallerUI.exe.vir"
sh=0633095F8751FF9B5ED587EC314B476ACF6C6B8E ft=1 fh=c71c0011bde00caa vn="Win32/Toolbar.Perion.J evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\GinyasBrowserCompanions\tbhcns.exe.vir"
sh=63A43D95149B189141788E7C493DDCF07110145A ft=1 fh=60457eaec91070ea vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir"
sh=BACADE5603A6B6124DAC4F95C23701D820861DDC ft=1 fh=c71c0011b4f86534 vn="Variante von Win32/ELEX.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir"
sh=605151B2EABB71AD5FA81E7513A43A0201AE8CAF ft=1 fh=48be24d62ce083a1 vn="Win32/AnyProtect.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\AnyProtectScannerSetup.exe.vir"
sh=D86451022DDD8348105C1D52FBFD2ADB1E2DCC30 ft=1 fh=d3e706a6307522ba vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll.vir"
sh=314F703F0F190BF70F0386509C10998D4E2BD10B ft=1 fh=2f9f46df1834d950 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\BackgroundContainer\TBUpdaterLogic_1.0.0.1.dll.vir"
sh=D3CBDD7C6ED2C9D81DA4FCF9AF57CDD5D3711ED3 ft=1 fh=86dbe26399c3d0fa vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\BackgroundContainer\TBUpdaterLogic_1.0.0.2.dll.vir"
sh=8C1CB25BB10CAE26F898CAE09C5CE29C8C25D0CF ft=1 fh=2671dd250fe983b5 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\Chrome\CT3322950\CHUninstaller.exe.vir"
sh=9E25A856ACC5C4AF25FDAB5DDFDC9A329BC36231 ft=1 fh=d971216b9dbedb12 vn="Variante von Win32/Toolbar.Conduit.AJ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\Chrome\CT3322950\UninstallerUI.exe.vir"
sh=E5AD99CE7C7362CA566156033ECB0F04F9437CA7 ft=1 fh=f45d83e01e1c8734 vn="Win32/Toolbar.Conduit.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\CT2319825\WinloadAutoUpdateHelper.exe.vir"
sh=C58417722C0B741EA8D55D06914E692180900885 ft=1 fh=f4976c33c2ff8570 vn="Win32/Toolbar.Conduit.V evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Conduit\CT3322950\FreemiumAAutoUpdateHelper.exe.vir"
sh=1426B95F2619E462F812F6807C88694DF9FBECE7 ft=1 fh=a10496de67a69999 vn="Win32/Toolbar.Conduit.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\DownloadGuide\mconduitinstaller.exe.vir"
sh=A8C9182D911F84D68DB74AC3DD3E40CCEAA37761 ft=1 fh=faa8286a77c9d18c vn="Win32/Packed.ScrambleWrapper.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\DownloadGuide\plus-hd-3-8.exe.vir"
sh=7AE4172C2A322C957F20F234A49EDF34C530FA63 ft=1 fh=3cd7e1f40ac6b811 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.507_0\APISupport\APISupport.dll.vir"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.507_0\nativeMessaging\TBMessagingHost.exe.vir"
sh=7AE4172C2A322C957F20F234A49EDF34C530FA63 ft=1 fh=3cd7e1f40ac6b811 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.507_1\APISupport\APISupport.dll.vir"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.507_1\nativeMessaging\TBMessagingHost.exe.vir"
sh=7AE4172C2A322C957F20F234A49EDF34C530FA63 ft=1 fh=3cd7e1f40ac6b811 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_0\APISupport\APISupport.dll.vir"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_0\nativeMessaging\TBMessagingHost.exe.vir"
sh=7AE4172C2A322C957F20F234A49EDF34C530FA63 ft=1 fh=3cd7e1f40ac6b811 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_1\APISupport\APISupport.dll.vir"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_1\nativeMessaging\TBMessagingHost.exe.vir"
sh=7AE4172C2A322C957F20F234A49EDF34C530FA63 ft=1 fh=3cd7e1f40ac6b811 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_2\APISupport\APISupport.dll.vir"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_2\nativeMessaging\TBMessagingHost.exe.vir"
sh=88F0020FC52EC4C7F80519D64F0C49D56210C499 ft=1 fh=df4b907de8b072e5 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.4.512_0\APISupport\APISupport.dll.vir"
sh=420AC42118A028FEE557FEC189141E95919110BF ft=1 fh=b3c9729cf11470f1 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.4.512_0\nativeMessaging\TBMessagingHost.exe.vir"
sh=88F0020FC52EC4C7F80519D64F0C49D56210C499 ft=1 fh=df4b907de8b072e5 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.4.512_1\APISupport\APISupport.dll.vir"
sh=420AC42118A028FEE557FEC189141E95919110BF ft=1 fh=b3c9729cf11470f1 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.4.512_1\nativeMessaging\TBMessagingHost.exe.vir"
sh=88F0020FC52EC4C7F80519D64F0C49D56210C499 ft=1 fh=df4b907de8b072e5 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.4.512_2\APISupport\APISupport.dll.vir"
sh=420AC42118A028FEE557FEC189141E95919110BF ft=1 fh=b3c9729cf11470f1 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.4.512_2\nativeMessaging\TBMessagingHost.exe.vir"
sh=69AF8D82BD65216B649368B4F1A0CB2708D296E1 ft=1 fh=10fa131a8ddb2fc9 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.7.519_0\APISupport\APISupport.dll.vir"
sh=02A100B872E4557B3D38BB2C8183647A8373817A ft=1 fh=62fa77ff477e89c5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.7.519_0\nativeMessaging\TBMessagingHost.exe.vir"
sh=9EFDE89A61BAAA7D5D5D4B08214BE3D2EE505248 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\102_dealply_m.js.vir"
sh=57F445259F179510FE1EACAAD27A82E87305756C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\103_intext_5_m.js.vir"
sh=30630D311A124BA372D209C02247D8A4238E3610 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\104_jollywallet_m.js.vir"
sh=04253E738106628805978963C1648F429CD2A08E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\105_corticas_m.js.vir"
sh=DA209282A25696B4D678B78442C261C5D81DC81B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=E5DA6BC389AFE8C4BE0D4BDF007094964623BEE4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=408125466C1087F1B28C7C43745E9E1F3480201C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=84CA9AA694BCAE4779C18F493E7083124A3126C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=DB730C30AB384D45E22D00304F1103E934CB33B9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=94D9025E35A51C71746811F94F4AA5EFC9133252 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"
sh=E87ABD87A6168E160F36A5CE9E444C1719F203DC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=D9DF0722882055C5C11AFD602D505B2E7EA9AFC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\184_noproblemppc_m.js.vir"
sh=723D315206A52C4CE6BE51080EAE93F13ACDBD86 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\194_retargeting_bi_m.js.js.vir"
sh=C93C18A48CB599CE10131AC779D8A9D333876854 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\195_icm_convertmedia_m.js.vir"
sh=F7A914E2916BD70A592C3812A5DBFDAF9C916D3D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\208_gam_manager.js.vir"
sh=0E7EF78031BACDEDEF5E878B0C1960A4E50BB4E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.112_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=9EFDE89A61BAAA7D5D5D4B08214BE3D2EE505248 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\102_dealply_m.js.vir"
sh=57F445259F179510FE1EACAAD27A82E87305756C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\103_intext_5_m.js.vir"
sh=30630D311A124BA372D209C02247D8A4238E3610 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\104_jollywallet_m.js.vir"
sh=DA209282A25696B4D678B78442C261C5D81DC81B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=E5DA6BC389AFE8C4BE0D4BDF007094964623BEE4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=408125466C1087F1B28C7C43745E9E1F3480201C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=84CA9AA694BCAE4779C18F493E7083124A3126C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=DB730C30AB384D45E22D00304F1103E934CB33B9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=94D9025E35A51C71746811F94F4AA5EFC9133252 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"
sh=E87ABD87A6168E160F36A5CE9E444C1719F203DC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=D9DF0722882055C5C11AFD602D505B2E7EA9AFC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\184_noproblemppc_m.js.vir"
sh=39D85F60370A7E5065A9BDC9D83216476D768A60 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\191_ciuvo_m.js.vir"
sh=723D315206A52C4CE6BE51080EAE93F13ACDBD86 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\194_retargeting_bi_m.js.js.vir"
sh=3C507C7B736F71E861CF46D235DD59FFF00B614B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\195_icm_convertmedia_m.js.vir"
sh=1401D47EDE9EBA824C7B3A27B6FA6852DBB76FC0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\208_gam_manager.js.vir"
sh=5E80029240BA4FF3B3E3010BB40E6867D0999160 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\226_set_campaign_id_m.js.vir"
sh=2C1383206E28E330BBC4DAA4BD9C8D7F942B2AE4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.129_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\102_dealply_m.js.vir"
sh=464E61CE0A166C746C8BE32F8BD662B0EDF79938 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\103_intext_5_m.js.vir"
sh=8BFBBD749FDAA46297DA7F28A30E29C55FD72880 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\104_jollywallet_m.js.vir"
sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\105_corticas_m.js.vir"
sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\120_luck_m.js.vir"
sh=E106EF12FBA54AD37717391E3A2A8B7416B0A30E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=6376FE6DF3E7E394FAE45C47A1FDE1CF41CAFBFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\125_arcadi2_m.js.vir"
sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\127_revizer_p_m.js.vir"
sh=97C406784CD0DEA751BE4E02EB82633F1F88CA1F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\135_arcadi3_m.js.vir"
sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\142_intext_fa_m.js.vir"
sh=AE2D5CE395EE9CD2595F77F616E574F4794B1152 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=0CEB1A073B87956FD1F21F8425B8F76015B1BCD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js.vir"
sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"
sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js.vir"
sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\175_coolmirage_m.js.vir"
sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"
sh=C9A8D5AE55FA65E00EE75767C5D2E9B56041858D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\184_noproblemppc_m.js.vir"
sh=913EFB9D675CDABC6594788C8F6F1BA8FB057815 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\189_active_sanity.js.vir"
sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\190_pops_5_m.js.vir"
sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\191_ciuvo_m.js.vir"
sh=F913C9EE03B4CCE8680961DBF505FA17BAC140F0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js.vir"
sh=28F70DF1D28964084CCA8382AE4ADA97EF0C4C0A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js.vir"
sh=CE36251B85631AF0D145BF086D14272593AB253A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\194_retargeting_bi_m.js.js.vir"
sh=0A113BDC19C5B96609992E6C9D972B814B918109 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\197_kreapixel_pops_m.js.vir"
sh=9A67AB016B12405F2FF8E65A64A035E46421F243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js.vir"
sh=6DF0914CB2A51AA8E7F1BDDEC414B8969C38A6F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js.vir"
sh=61DB672F16D1D9053F6B8D591E51C53BA3165770 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\200_foxydeal_m.js.vir"
sh=392B3EB529AF22E57C2AC4076E7702176010694C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\204_pricedetect_m.js.vir"
sh=5F25813D57A67DE3D622192979961AA8AFE7D723 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjgnhihlklpobkaloamkankaaoclfjh\1.26.84_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=E41ADC595565B66767FE7B834E5071585C1B5606 ft=1 fh=a9364b00bc63ba18 vn="Variante von Win32/Amonetize.AM evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\SwvUpdater\Updater.exe.vir"
sh=068A54F966DB6AC14BCA0E39E2A99E3F0027304D ft=1 fh=39f7a16b0423d981 vn="Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\LocalLow\FreemiumA\hk64tbFree.dll.vir"
sh=CC6AF3A384A61C1C621BA5AB43583E82FF281530 ft=1 fh=bbbd034bf7d0bf76 vn="Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\LocalLow\FreemiumA\hktbFree.dll.vir"
sh=9B3B44428CC80CC43F085AE514E7E16F7963EACC ft=1 fh=4c03fc1250fa29f9 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\LocalLow\FreemiumA\ldrtbFree.dll.vir"
sh=33457E2F2405727124C107D6DEAF24C94E992463 ft=1 fh=e719e166edfd7994 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\LocalLow\FreemiumA\tbFree.dll.vir"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\LocalLow\Winload\ldrtbWinl.dll.vir"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\LocalLow\Winload\tbWinl.dll.vir"
sh=EE52856DE25C0E09C84B9104CCF5CDD141EAEBB4 ft=1 fh=f0a0271613860e17 vn="Win32/AdWare.Snoozer.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Intermediate\update_installer.exe.vir"
sh=875BF27A9D7EC8A57E1D22728A94605E77A66F99 ft=1 fh=1066940167675931 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF10.dll.vir"
sh=D899A4B906A21BD09967DEC18E585BBC0857613F ft=1 fh=57376ab25fbf95e6 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF11.dll.vir"
sh=1C892B22508224197B9E18D1E8EA140364FCBE16 ft=1 fh=7cdaad0dae2c1b59 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF12.dll.vir"
sh=24688F1377B4440A9B1878032F0E0637A0B7413D ft=1 fh=f3606e917bb05064 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF13.dll.vir"
sh=8DED72F0F1AC00002F7B37896444F81344797137 ft=1 fh=8d756a4d0ef40548 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF14.dll.vir"
sh=A7676DE801151EC36449A35D802BE6D517585250 ft=1 fh=77d903f3d76df8e3 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF15.dll.vir"
sh=5C6557C60BE87DDA95642C27D5A2CC62BA5994AB ft=1 fh=3ae6f06bbaacc194 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF16.dll.vir"
sh=40285FF9FD17402ECE35DF8C168E8EFA2CE62A6A ft=1 fh=917a4813993a40f9 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF17.dll.vir"
sh=F692CE5E532F547C8501BD229FBC123303B3D9B3 ft=1 fh=80a995bee4d32411 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF18.dll.vir"
sh=6BC05D76DE5700A7842F6D698D9DEBF694CB07F9 ft=1 fh=4592982ca8f1a507 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF19.dll.vir"
sh=57160E03B62706FF8E8BAC83FF586555EC22810C ft=1 fh=56a5826f3426f20b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF2.dll.vir"
sh=90E641FBFF0C1DFCBE3C77E5C50F4E894F26217A ft=1 fh=de6ef194b23fec2d vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF20.dll.vir"
sh=38A74467E791AAB4581FC74C7DADE79E5EEB4795 ft=1 fh=479f62e59405fe7b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF21.dll.vir"
sh=94D63798953E0B82E555D9DC3403DF379FD3077F ft=1 fh=14354187413f58cf vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF22.dll.vir"
sh=F2AAB78ECD52FFECC521C596FF157F8D57831EF4 ft=1 fh=2cbaad4b382bf3f3 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF23.dll.vir"
sh=95E1985C7154E988280E010473E1B9C987D79FA7 ft=1 fh=3fb80b633a60e120 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF24.dll.vir"
sh=D1C1E4164EEA763CB0B4FF99EAE6CAD3C42A86D6 ft=1 fh=c48a79bf03282173 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF25.dll.vir"
sh=E945BB9901884E902C2C90DD0D24022300C4AE59 ft=1 fh=4681a5397b7995e6 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF26.dll.vir"
sh=0B1ACE568F3C7E497827F1ADD2B9A20FD6D55874 ft=1 fh=0de96f957859625b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF27.dll.vir"
sh=582321BBF62331B40FBFE2DFF71EFAA5927220B2 ft=1 fh=66e056ec771f27d3 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF28.dll.vir"
sh=3939FBF3A2DCCD352A0F5432C2AC53073B1971BA ft=1 fh=1dd920926f4c2d90 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF29.dll.vir"
sh=5BAAF067D3424BB7621037963FCA6909ED396867 ft=1 fh=15e5e8b58b83a4fd vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF4.dll.vir"
sh=6A96CADA440100988B6BACC46972EA74453CDD5D ft=1 fh=f19b674463ab7da5 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF5.dll.vir"
sh=2E9A62F87FB34FD7CBEFDE10CD4458647AC06C7D ft=1 fh=dbdd0972697e1a93 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF6.dll.vir"
sh=47E9559928996B929FA07B321F8B81C2340B8B26 ft=1 fh=bc9fb25d769824bf vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF7.dll.vir"
sh=A998F7BA733510C93AB904DEB1CAA33865E6A7C9 ft=1 fh=b48111079e839687 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF8.dll.vir"
sh=E7FCE09B991B197FC0D8E714EC9586DCFAC6458A ft=1 fh=609f336dcb625945 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Settings Manager\systemk\components\SystemKHlpFF9.dll.vir"
sh=932FA61BB13DF187FF8A9B4EBB8AD3F62A18FA70 ft=1 fh=ef57336d7b1c8376 vn="Win32/AdWare.Snoozer.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Snz\Snz.exe.vir"
sh=9E77E1D2FD7B77B0FD8A71A70C35DD5A16836CF3 ft=1 fh=b241df9fafd25e77 vn="Win32/Systweak.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir"
sh=4122C133634EE62172F3F37C8C9C34301B2FA693 ft=1 fh=120574080513b36f vn="Variante von Win64/BrowseFox.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\drivers\{9d5747ee-0448-4681-8337-1555de75a3b6}Gw.sys.vir"
sh=4920499AC2B7FC459D45BBAB806A2F75FF4BC25E ft=1 fh=92bccc7991282d5b vn="Variante von Win32/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Windows\System32\roboot.exe.vir"
sh=7AE4172C2A322C957F20F234A49EDF34C530FA63 ft=1 fh=3cd7e1f40ac6b811 vn="Variante von Win32/Conduit.SearchProtect.P evtl. unerwünschte Anwendung" ac=I fn="C:\System Volume Information\SystemRestore\FRStaging\Users\user\AppData\Local\Google\Chrome Frame\User Data\IEXPLORE\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_0\APISupport\APISupport.dll"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=5a93daf7e0cc20e5 vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\System Volume Information\SystemRestore\FRStaging\Users\user\AppData\Local\Google\Chrome Frame\User Data\IEXPLORE\Default\Extensions\hkhjppglbhfdpdameiopkfoopdchkgef\10.26.2.7_0\nativeMessaging\TBMessagingHost.exe"
sh=73870D82E3AF7A11151C2E691DA001AE39AAAE20 ft=1 fh=4ba205626f7f9ad9 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF10.dll"
sh=1886F8BE346D3ABCA7163F1BD8FBEF0A49D77D28 ft=1 fh=d88a0bc79f9d697d vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF11.dll"
sh=2CD22A272C3BA4A6A7A83409B8A3D1E3B2F1762E ft=1 fh=05993594940ce594 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF12.dll"
sh=7745AAF2CE6120F3CD1F8857C3B59A4B7A045430 ft=1 fh=e6c8866fd53c5d1f vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF13.dll"
sh=26CC9C0DD8E3A5900900B3C15B1B3B781887E466 ft=1 fh=c734203706b9dfca vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF14.dll"
sh=1AE9D029BA21C580D5E3175A3A3B9FADC0CF802A ft=1 fh=6d06c70be297ab0a vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF15.dll"
sh=A478BF4D28C8FE0ABC174654DFDF178F20F5F309 ft=1 fh=d54ba5de63481583 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF16.dll"
sh=AFD4BEA39688678EEC5A485D1424F01E36B22C87 ft=1 fh=91ddd4397e224ec1 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF17.dll"
sh=61A7E97915538E77FDC059C9F8A1054BE99D2584 ft=1 fh=8d391819334aa4d9 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF18.dll"
sh=EAD60431EAE9F9C2DFCDA3A5CA7983C44F13B7EF ft=1 fh=1b386942bfdad96a vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF19.dll"
sh=AAA50832243D76006500AC5A6534FBAF728872F4 ft=1 fh=514ea6bdf696f7d1 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF2.dll"
sh=D422DA5F1103014B4E86953C9BAE45EEE9F5C99B ft=1 fh=2793f2ab13670c5b vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF20.dll"
sh=230D99E446F82A3A05EB4EB4D484DE44EB1691A6 ft=1 fh=d1fd5043496fa6e4 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF21.dll"
sh=FCC70E9A8B370184F4F151BFE1FF5E658B244F75 ft=1 fh=9a7331f38be30832 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF22.dll"
sh=EFC458368EA13D444622C9A0431F516EB7D421AF ft=1 fh=2a6affd811ebc0cf vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF23.dll"
sh=444265735763CDA0B99BE9BFD6A5D0BA7AEF7987 ft=1 fh=0ad51d6249de4fab vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF24.dll"
sh=9B1CD7ED6802C52422468AAF1DE3123D199305FC ft=1 fh=08dbf393b9aa6241 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF25.dll"
sh=514BC9DFB739E784BA6857A5EB997246A4B246AC ft=1 fh=426900389ef5fdec vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF26.dll"
sh=0B34809EA4EC9ED94F78056C41F0F94179A3E48E ft=1 fh=358baba3eb428cb2 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF27.dll"
sh=E55EF8F91F1B0451CE6879543FEA22E4530290FC ft=1 fh=81c10f39951ae642 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF28.dll"
sh=A61E5B73D24051570ED071B0C31C45447826E265 ft=1 fh=677a8ddc335afdcc vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF29.dll"
sh=88C381D8CD3F8353EF35CF13F5BE9F0DA09FCB31 ft=1 fh=b50c38d655c158dd vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF4.dll"
sh=D13E17E11947A4EC609311343313AECBCE47AF24 ft=1 fh=e77bcdfee74ef960 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF5.dll"
sh=B1BF50331980C8FE7F5FD26985B0E35B9585699A ft=1 fh=854f581cf001dcf7 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF6.dll"
sh=96C2DDBADD027E46C855A1365E1853E391FCBD9C ft=1 fh=d25db7f570cc7229 vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF7.dll"
sh=65397F56E5FB700ADEF0325EA043D51D6BD103F0 ft=1 fh=6fe5c6b1f740872c vn="Variante von Win32/Toolbar.SearchSuite.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF8.dll"
sh=627B1A0D60C746FDCA3C6857FE42BF3C91E9812C ft=1 fh=62acf915af2b6379 vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}\components\SystemKHlpFF9.dll"
sh=B717466428F8EDE52D3AB00D4BB73DBC7412BECC ft=1 fh=41a050c52cbaa690 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Advanced-SystemCare.exe"
sh=A981E3D6F03D3BD57D1472F33A4093A01533F8A8 ft=1 fh=7aaf7b3d0491af48 vn="Variante von MSIL/AdvancedSystemProtector.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Downloads\wzmp_8.exe"
sh=7F29C65D27184E6C1E65253A19154568335D994C ft=1 fh=8dfecc9f0b4d34d4 vn="Win32/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\sasnative32.exe"

cosinus 12.11.2014 22:47
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}
C:\Users\user\Desktop\Advanced-SystemCare.exe
C:\Users\user\Downloads\wzmp_8.exe
C:\Windows\System32\sasnative32.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


tiffany1963 12.11.2014 22:57
Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-11-2014 01
Ran by user at 2014-11-12 22:55:57 Run:5
Running from C:\Users\user\Downloads
Loaded Profile: user (Available profiles: user)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F}
C:\Users\user\Desktop\Advanced-SystemCare.exe
C:\Users\user\Downloads\wzmp_8.exe
C:\Windows\System32\sasnative32.exe
*****************

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b22z9jh3.default\extensions\{C608E7CD-C8DE-C4BE-147D-CD78D3587F6F} => Moved successfully.
C:\Users\user\Desktop\Advanced-SystemCare.exe => Moved successfully.
C:\Users\user\Downloads\wzmp_8.exe => Moved successfully.
C:\Windows\System32\sasnative32.exe => Moved successfully.

==== End of Fixlog ====

cosinus 12.11.2014 23:26
Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:34 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132